Groups > Microsoft > Rights Management Services > RE: RMS 1.0 SP2 - machine would not activate




RMS 1.0 SP2 - machine would not activate

RMS 1.0 SP2 - machine would not activate
Wed, 16 Jan 2008 14:39:49 +010 
Hello

I did setup an infrastructure with RMS 1.0 SP2 and cannot have any client
machine activated. 
I installed RMS Client SP2 on a client machine, member of the domain, with
administrator and local/administrator rights, and still cannot activate my
machine.
Is this correct that (in SP2) activation occurs during the installation of the
RMS Client? I have not found an exlicit way to force machine activation.

Here is the result of IRM Configuration Test:

IRM Configuration TestIRM Configuration Test (5.2.3790.360)
      Machine Information
      Date:Wed Jan 16 14:01:51 2008
      Machine:CLIENT [Client.mydomain.com]
      Username:MYDOMAIN\administrator [Administrator]
      Operating system:Microsoft Windows XP Service Pack 2
[5.1.2600.xpsp_sp2_gdr.070227-2254]
      Target:RM Production Environment

      CheckStatusDetailed information
      1. Office System  SUCCESS  Microsoft Office System Dogfood 4 (build
12.0.4518.1014) is installed
      2. Operating system  SUCCESS  Microsoft Windows XP Service Pack 2 (build
1.2600.xpsp_sp2_gdr.070227-2254) is installed
      3. RM client  SUCCESS  Microsoft Rights Management client (build
5.2.3790.347) is installed
      4. Kernel Debugger  SUCCESS  The kernel debugger is not present
      5. Registry overrides  SUCCESS  No incorrect registry key overrides was
detected
      6. Service URLs  SUCCESS  The Enterprise RM service is in the Local
Intranet or Trusted Sites zone
      7. IRM manifests  SUCCESS  IRM application manifests are correct
      8. Machine activation  WARNING  The machine is not activated
      9. User certificates  WARNING  No user certificates found
      10. System clock  SUCCESS  The system clock is correct
      11. Pending Reboot  SUCCESS  No pending reboot detected
      12. Product SKU  SUCCESS   
      13. Network Connectivity  SUCCESS  The computer is online
      14. Domain Membership  SUCCESS  Member of MYDOMAIN domain
      15. Temporary Directory  SUCCESS  Temporary directory set to C:\Documents
and Settings\administrator\Local Settings\Temp\
      16. Incompatible applications  SUCCESS  No known incompatible applications
found.
      17. User Email in AD  SUCCESS  The logged on user's email found in the AD:
administrator@mydomain.com

      Certificates
      Type ValidAccountAccount Type SID Issued On Duration Service URLs

      Registry Information
      Office Activation Serviceregistry entry absent
      Office Enterprise Certification Serviceregistry entry absent
      Office Enterprise Client Enrollment Serviceregistry entry absent
      Office Cloud Certification Serviceregistry entry absent
      Office Cloud Client Enrollment 
      Servicehttps://licensing.drm.microsoft.com/licensing
      Office RM Client Setup URLregistry entry absent
      Office IRM Disableregistry entry absent
      Office IRM DisablePassportCertificationregistry entry absent
      Office IRM DisableCertificateValidationregistry entry absent
      Office IRM Permission Policy Pathregistry entry absent
      Office Cached Enterprise Client Enrollment Serviceregistry entry absent
      RMA Activation Serviceregistry entry absent
      RMA Enterprise Certification Serviceregistry entry absent
      RMA Cloud Certification 
      Servicehttps://certification.drm.microsoft.com/certification
      RM Activation Serviceregistry entry absent
      RM Enterprise Client Enrollment Serviceregistry entry absent
      RM Cloud Client Enrollment Serviceregistry entry absent
      Use Proxy Server0
      Proxy Serverregistry entry absent
      Don't use proxy server forregistry entry absent
      Use proxy autoconfig script fromregistry entry absent
      IE Enhanced Securityregistry entry absent
      The Enterprise Service Discovery results:
      RM Activation Service  http://iap1rms.mydomain.com/_wmcs/Certification
      RM Certification Service  http://iap1rms.mydomain.com/_wmcs/Certification
      RM Online Publishing Service  http://iap1rms.mydomain.com/_wmcs/licensing
      RM Client Enrollment Service  http://iap1rms.mydomain.com/_wmcs/licensing

Thanks
Post Reply
RE: RMS 1.0 SP2 - machine would not activate
Sat, 2 Feb 2008 18:59:02 -0800 
Activ ation occurs when the user needs to either open an RMS protected 
document/e-mail or either protects a document/e-mail.

Hope this helps.
Steph

"Buu-Sao" wrote:

> Hello
> 
> I did setup an infrastructure with RMS 1.0 SP2 and cannot have any client
machine activated. 
> I installed RMS Client SP2 on a client machine, member of the domain, with
administrator and local/administrator rights, and still cannot activate my
machine.
> Is this correct that (in SP2) activation occurs during the installation of
the RMS Client? I have not found an exlicit way to force machine activation.
> 
> Here is the result of IRM Configuration Test:
> 
> IRM Configuration TestIRM Configuration Test (5.2.3790.360)
>       Machine Information
>       Date:Wed Jan 16 14:01:51 2008
>       Machine:CLIENT [Client.mydomain.com]
>       Username:MYDOMAIN\administrator [Administrator]
>       Operating system:Microsoft Windows XP Service Pack 2
[5.1.2600.xpsp_sp2_gdr.070227-2254]
>       Target:RM Production Environment
> 
>       CheckStatusDetailed information
>       1. Office System  SUCCESS  Microsoft Office System Dogfood 4 (build
12.0.4518.1014) is installed
>       2. Operating system  SUCCESS  Microsoft Windows XP Service Pack 2
(build 1.2600.xpsp_sp2_gdr.070227-2254) is installed
>       3. RM client  SUCCESS  Microsoft Rights Management client (build
5.2.3790.347) is installed
>       4. Kernel Debugger  SUCCESS  The kernel debugger is not present
>       5. Registry overrides  SUCCESS  No incorrect registry key overrides
was detected
>       6. Service URLs  SUCCESS  The Enterprise RM service is in the Local
Intranet or Trusted Sites zone
>       7. IRM manifests  SUCCESS  IRM application manifests are correct
>       8. Machine activation  WARNING  The machine is not activated
>       9. User certificates  WARNING  No user certificates found
>       10. System clock  SUCCESS  The system clock is correct
>       11. Pending Reboot  SUCCESS  No pending reboot detected
>       12. Product SKU  SUCCESS   
>       13. Network Connectivity  SUCCESS  The computer is online
>       14. Domain Membership  SUCCESS  Member of MYDOMAIN domain
>       15. Temporary Directory  SUCCESS  Temporary directory set to
C:\Documents and Settings\administrator\Local Settings\Temp\
>       16. Incompatible applications  SUCCESS  No known incompatible
applications found.
>       17. User Email in AD  SUCCESS  The logged on user's email found in
the AD: administrator@mydomain.com
> 
>       Certificates
>       Type ValidAccountAccount Type SID Issued On Duration Service URLs
> 
>       Registry Information
>       Office Activation Serviceregistry entry absent
>       Office Enterprise Certification Serviceregistry entry absent
>       Office Enterprise Client Enrollment Serviceregistry entry absent
>       Office Cloud Certification Serviceregistry entry absent
>       Office Cloud Client Enrollment 
>       Servicehttps://licensing.drm.microsoft.com/licensing
>       Office RM Client Setup URLregistry entry absent
>       Office IRM Disableregistry entry absent
>       Office IRM DisablePassportCertificationregistry entry absent
>       Office IRM DisableCertificateValidationregistry entry absent
>       Office IRM Permission Policy Pathregistry entry absent
>       Office Cached Enterprise Client Enrollment Serviceregistry entry
absent
>       RMA Activation Serviceregistry entry absent
>       RMA Enterprise Certification Serviceregistry entry absent
>       RMA Cloud Certification 
>       Servicehttps://certification.drm.microsoft.com/certification
>       RM Activation Serviceregistry entry absent
>       RM Enterprise Client Enrollment Serviceregistry entry absent
>       RM Cloud Client Enrollment Serviceregistry entry absent
>       Use Proxy Server0
>       Proxy Serverregistry entry absent
>       Don't use proxy server forregistry entry absent
>       Use proxy autoconfig script fromregistry entry absent
>       IE Enhanced Securityregistry entry absent
>       The Enterprise Service Discovery results:
>       RM Activation Service 
http://iap1rms.mydomain.com/_wmcs/Certification
>       RM Certification Service 
http://iap1rms.mydomain.com/_wmcs/Certification
>       RM Online Publishing Service 
http://iap1rms.mydomain.com/_wmcs/licensing
>       RM Client Enrollment Service 
http://iap1rms.mydomain.com/_wmcs/licensing
>
Post Reply
Re: RMS 1.0 SP2 - machine would not activate
Wed, 13 Feb 2008 02:23:58 -080 
Hello..
To check if the machine is activated, you should find a
CERT-Machine.drm  in C:\Documents and Settings\user\Application Data
\Microsoft\DRM

If it isn't there, try runing AcquireClientLicensor in the RMS Client
SDK.
After user activation, you should find the following files in the same
directory:
GIC-m...@example.com-{...}.drm
CLC-m...@example.com-{...}.drm

After that, run IRMCheck to see what is mssing.
Post Reply
RE: RMS 1.0 SP2 - machine would not activate
Fri, 15 Feb 2008 10:51:01 -080 
OK. So looking at your IRMCheck the first thing that stands out to me is this:

8. Machine activation  WARNING  The machine is not activated

This tells me that the RMS server has nothing to do with the problem right 
now. We can't get the local machine certificate created, which is the first 
step of bootstrapping a machine.

So, then next question is why.

We can get to the answer by going out to a command prompt and executing the 
following:

rmactivate

then type

echo %errorlevel%

This should return a value. What is that value? If we have this number, we 
can figure out potentially why the securty processor is complaining about.

-Jason
"Buu-Sao" wrote:

> Hello
> 
> I did setup an infrastructure with RMS 1.0 SP2 and cannot have any client
machine activated. 
> I installed RMS Client SP2 on a client machine, member of the domain, with
administrator and local/administrator rights, and still cannot activate my
machine.
> Is this correct that (in SP2) activation occurs during the installation of
the RMS Client? I have not found an exlicit way to force machine activation.
> 
> Here is the result of IRM Configuration Test:
> 
> IRM Configuration TestIRM Configuration Test (5.2.3790.360)
>       Machine Information
>       Date:Wed Jan 16 14:01:51 2008
>       Machine:CLIENT [Client.mydomain.com]
>       Username:MYDOMAIN\administrator [Administrator]
>       Operating system:Microsoft Windows XP Service Pack 2
[5.1.2600.xpsp_sp2_gdr.070227-2254]
>       Target:RM Production Environment
> 
>       CheckStatusDetailed information
>       1. Office System  SUCCESS  Microsoft Office System Dogfood 4 (build
12.0.4518.1014) is installed
>       2. Operating system  SUCCESS  Microsoft Windows XP Service Pack 2
(build 1.2600.xpsp_sp2_gdr.070227-2254) is installed
>       3. RM client  SUCCESS  Microsoft Rights Management client (build
5.2.3790.347) is installed
>       4. Kernel Debugger  SUCCESS  The kernel debugger is not present
>       5. Registry overrides  SUCCESS  No incorrect registry key overrides
was detected
>       6. Service URLs  SUCCESS  The Enterprise RM service is in the Local
Intranet or Trusted Sites zone
>       7. IRM manifests  SUCCESS  IRM application manifests are correct
>       8. Machine activation  WARNING  The machine is not activated
>       9. User certificates  WARNING  No user certificates found
>       10. System clock  SUCCESS  The system clock is correct
>       11. Pending Reboot  SUCCESS  No pending reboot detected
>       12. Product SKU  SUCCESS   
>       13. Network Connectivity  SUCCESS  The computer is online
>       14. Domain Membership  SUCCESS  Member of MYDOMAIN domain
>       15. Temporary Directory  SUCCESS  Temporary directory set to
C:\Documents and Settings\administrator\Local Settings\Temp\
>       16. Incompatible applications  SUCCESS  No known incompatible
applications found.
>       17. User Email in AD  SUCCESS  The logged on user's email found in
the AD: administrator@mydomain.com
> 
>       Certificates
>       Type ValidAccountAccount Type SID Issued On Duration Service URLs
> 
>       Registry Information
>       Office Activation Serviceregistry entry absent
>       Office Enterprise Certification Serviceregistry entry absent
>       Office Enterprise Client Enrollment Serviceregistry entry absent
>       Office Cloud Certification Serviceregistry entry absent
>       Office Cloud Client Enrollment 
>       Servicehttps://licensing.drm.microsoft.com/licensing
>       Office RM Client Setup URLregistry entry absent
>       Office IRM Disableregistry entry absent
>       Office IRM DisablePassportCertificationregistry entry absent
>       Office IRM DisableCertificateValidationregistry entry absent
>       Office IRM Permission Policy Pathregistry entry absent
>       Office Cached Enterprise Client Enrollment Serviceregistry entry
absent
>       RMA Activation Serviceregistry entry absent
>       RMA Enterprise Certification Serviceregistry entry absent
>       RMA Cloud Certification 
>       Servicehttps://certification.drm.microsoft.com/certification
>       RM Activation Serviceregistry entry absent
>       RM Enterprise Client Enrollment Serviceregistry entry absent
>       RM Cloud Client Enrollment Serviceregistry entry absent
>       Use Proxy Server0
>       Proxy Serverregistry entry absent
>       Don't use proxy server forregistry entry absent
>       Use proxy autoconfig script fromregistry entry absent
>       IE Enhanced Securityregistry entry absent
>       The Enterprise Service Discovery results:
>       RM Activation Service 
http://iap1rms.mydomain.com/_wmcs/Certification
>       RM Certification Service 
http://iap1rms.mydomain.com/_wmcs/Certification
>       RM Online Publishing Service 
http://iap1rms.mydomain.com/_wmcs/licensing
>       RM Client Enrollment Service 
http://iap1rms.mydomain.com/_wmcs/licensing
>
Post Reply
about | contact