Skip to main content
Perform the tasks in this section to install and configure Microsoft AD RMS.
  1. Install AD RMS.
  2. Configure AD RMS.

​
Install AD RMS

Perform the following steps to install AD RMS:
1
Select Start > Administrative Tools > Server Manager and then Manage. Select [ Add roles and features ]. In the Before you Begin window, select [ Next ].
2
Choose the installation type: Role-based or Feature-based installation. Select [ Next ].
3
In the Server Selection window, select the server from the domain (or local machine) on which to install AD RMS. Select [ Next ].
4
On the Server Roles page, check the box next to Active Directory Rights Management Services. Then, select [ Next ] and [ Add Features ].
5
In the Features window, select [ Next ].
6
In the AD RMS page, select [ Next ].
7
In the Role Services page, make sure to select Active Directory Rights Management Server. If you need Identity Federation Support, select accordingly, and then select [ Next ].
8
On the Confirmation page, select [ Install ]. Proceed through the final options.
9
After the installation finishes, select [ Close ].

​
Configure AD RMS

Perform the following steps to configure the new AD RMS installation, including the CSP definition and key generation.
1
Go to Start > Administrative Tools > Server Manager. Select the flag icon to the left of Manage. Select [ Perform Additional Configuration ] under Active Directory Rights Management Services.
2
In the Active Directory Rights Management Services page, select [ Next ].
3
Define whether to create a new AD RMS root cluster or to join an existing one. Select [ Next ].
4
Define the database server. Select [ Next ].
5
Define the domain user account. Select [ Next ].
6
Set the Cryptographic Mode to use RSA2048/SHA256 or RSA1024/SHA1. Select [ Next ].
7
Select [ Use CSP Key Storage ]. Select [ Next ].
8
Select the Futurex RSA CSP from the CSP drop-down list.
The system attempts to connect to the CryptoHub to query its capabilities. View the logs (the log location is defined in the CSP configuration file) to confirm the connection was successful and no errors occurred.
9
Define whether to create a new key or use an existing key. Select [ Next ].
10
Select the AD RMS Cluster WebSite. Select [ Next ].
11
Define the connection method and the Fully Qualified Domain Name for the site. Select [ Next ].
12
Define the SSL certificate parameters. Select [ Next ].
13
Define the Server Licensor Certificate name. Select [ Next ].
14
Select [ Register the SCP now ] and select [ Next ].
15
Select [ Install ].
16
View the logs in the directory defined in the CSP configuration file to confirm success and that no errors occurred.