Share via


Initializing the AD RMS Environment

To publish or use Active Directory Rights Management Services (AD RMS)–protected content, a secure environment must be configured. There are three elements of a secure environment.

Element Description
Lockbox Obtained when the AD RMS client is installed. In AD RMS client 1.0, the lockbox is obtained when the computer is activated.
Manifest Identifies all the principals by a hash of components of the application and operating system and an RSA key pair.
Machine certificate Contains the machine public key and is signed by the root of trust.

Many of the AD RMS client functions, such as DRMLoadLibrary, DRMCreateEnablingPrincipal, and DRMCreateBoundLicense require an AD RMS environment handle. This handle is obtained by calling the DRMInitEnvironment function to initialize the AD RMS environment for the calling application.

The OfflinePublishing sample included with the AD RMS SDK shows how to initialize the client environment. For more information, see Client Sample Programs.

See Also

Storing and Retrieving Licenses and Certificates
Building a Consuming Application

Send comments about this topic to Microsoft

Build date: 3/13/2008