An end-user license (EUL) identifies the rights and conditions to consume protected content. A rights account certificate and a machine certificate must exist before your application can request and end-user license. The license can contain the following elements:
- The issuance date and time.
- A type identifier.
- The name and ID of the issuer.
- The principal ID, public key, digest and security processor.
- The Active Directory Federated Service (ADFS) principals.
- A WORK object that identifies the item of content and the associated rights.
- Additional policies that apply to content use.
- A signature created by using the private key of the AD RMS activation service.
- A certificate chain that contains one or more server licensor certificates and one or more CA certificates.
The following diagram shows the basic XrML structure of the license. For a more complete example, see End User License XML Example.
- <XrML xmlns="" version="1.2" purpose="ContentLicense">
- <BODY type="LICENSE" version="3.0">
+ <ISSUEDTIME>
+ <DESCRIPTOR>
+ <ISSUER>
+ <ISSUEDPRINCIPALS>
- <WORK>
+ <OBJECT>
+ <METADATA>
- <RIGHTSGROUP name="MainRights">
+ <RIGHTSLIST>
</RIGHTSGROUP>
</WORK>
- <POLICYLIST>
+ <POLICY>
</POLICYLIST>
<AUTHENTICATEDDATA />
</BODY>
- <SIGNATURE>
+ <DIGEST>
<ALGORITHM />
<VALUE />
</SIGNATURE>
</XrML>
+ <XrML xmlns="" version "1.2"> <!-- server licensor certificate -->
+ <XrML xmlns="" version "1.2"> <!-- server licensor certificate -->
+ <XrML xmlns="" version "1.2"> <!-- DRM-CA-Certificate -->
+ <XrML xmlns="" version "1.2"> <!-- DRM-CA-Certificate -->
See Also
- Decrypting Content
- Decrypting Content Code Example
- End-User License Store
- End User License XML Example
Send comments about this topic to Microsoft
Build date: 11/12/2009