[The AD RMS SDK leveraging functionality exposed by the client in Msdrm.dll is available for use in Windows Server 2008, Windows Vista, Windows Server 2008 R2, Windows 7, Windows Server 2012, and Windows 8. It may be altered or unavailable in subsequent versions. Instead, use Active Directory Rights Management Services SDK 2.1, which leverages functionality exposed by the client in Msipc.dll.]
Active Directory Rights Management Services (AD RMS) uses the eXtensible rights Markup Language (XrML) in licenses, certificates, and templates to identify digital content and the rights and conditions that govern use of that content. Three version of the language currently exist - 1.0, 1.2, and 2.0. AD RMS uses XrML 1.2. You can visit the official website for the language, www.xrml.org, to download specifications, schemas, examples, and white papers. AD RMS uses XrML 1.2 in the following documents.
|Machine certificate||Identifies a computer in the AD RMS certificate hierarchy. For an XrML 1.2 example, see Machine Certificate XML Example.|
|Rights account certificate||Identifies an Active Directory user account in the AD RMS certificate hierarchy. For an XrML 1.2 example, see Rights Account Certificate XML Example.|
|Issuance license||Identifies the users who can consume protected content and the rights that can be made available to them. For an XrML 1.2 example, see Issuance License XML Examples.|
|End-user license||Identifies the right(s) granted to a specific user to consume protected content. For an XrML 1.2 example, see End User License XML Example.|
|Client licensor certificate||Used to sign an issuance license offline.|
|Server licensor certificate||Identifies an AD RMS server in the AD RMS certificate hierarchy.|
|Application manifest||Identifies your application by signing it with the Pre-production or Production certificate provided by Microsoft. For more information, see Creating an Application Manifest.|
|Pre-Production certificate||Provided by Microsoft to sign a custom application into the Pre-production AD RMS certificate hierarchy. This certificate is used during application development.|
|Production certificate||Provided by Microsoft to sign a custom application into the Production AD RMS certificate hierarchy. This certificate is used by released applications that have been licensed by Microsoft.|
|Rights policy template||Contains a set of predefined rights that can be used when protecting a document in place of manually defining usage policy.|
The XrML element is the root of an XrML license or certificate. It contains a BODY element that encapsulates the license or certificate information and an optional SIGNATURE element that contains an encrypted hash of the body. Attributes are used to identify the XrML version number (currently 1.2), namespace, and document purpose.
<!ELEMENT XrML (BODY, SIGNATURE?)> <!ATTLIST XrML version CDATA #REQUIRED xmlns %URI; #IMPLIED purpose CDATA #IMPLIED>
For more information, see the following topics: