Create an association between the signed AD RMS certificate and the key pair in the Windows Certificate Store

this section explains how to associate the signed ad rms certificate with its corresponding private key stored in your windows account profile before making this association, you must import the ca certificate that issued the ad rms certificate into the trusted root certification authorities windows certificate store import the ca certificate perform the following steps to import the ca certificate that issued the ad rms certificate into the trusted root certification authorities store on the computer where you plan to install microsoft ad rms, open the manage computer certificates program right click the trusted root certification authorities store and select all tasks > import follow the steps in the certificate import wizard to import the root ca certificate file you exported from the {{k}} and moved to this computer in the previous section a confirmation message displays if the import succeeds associate the certificate with the key perform the following steps to associate the signed ad rms certificate with its corresponding private key stored in your windows account profile open either the command prompt or powershell go to the directory where you saved the signed ad rms certificate file run the following command to create an association between the signed ad rms certificate and its corresponding key pair stored in your windows account profile certreq accept machine signed adrms cert pem if the command succeeds, information about the installed certificate displays