Install and Configure AD RMS Cluster - Part 6

In this post, i'm going to show you on the integration of IRM Exchange. In my case here, i'm using Exchange 2010 SP3.

Enable Super User Access
1. Before enable the super user group. Create a distribution group and name it to RMSSU

2. Add the federated email mailbox FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042 into the group

3. Logon to RMS01 or RMS02, navigate to Security Policies > Super Users. Click change super user group

4. Set the super user group to rmssu@external.com

5. The super user group has been defined

---

Server Certificate Permission

1. Logon to RMS01, navigate to C:\inetpub\wwwroot\_wmcs\certification. Choose the properties of ServerCertification.asmx

 

2. In the security tab, click Advanced

 

3. Click continue

4. Click Add

5. Grant the Exchange Servers with Read and Read & execute permission

6. Grant the AD RMS Service Group with Read and Read & execute permission

7. Both Exchange Server and AD RMS Service Group have been granted the permission successfully

8. Repeat the step 1 to step 7 for RMS02

---

Enable IRM Feature for Internal Message

1. Logon to EXCH01 or EXCH02 which are Exchange 2010 servers, enter the following cmdlet in EMS

Set-IRMConfiguration –InternalLicensingEnabled:$True

2. Enter the following cmdlet to verify

Get-IRMConfiguration

 

3. Restart the IIS service

4. Enter the following cmdlet to test the IRM configuration

Test-IRMConfiguration –Sender tester01@external.com