Export server licensor certificate

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 R2

The server licensor certificate (SLC) of the RMS cluster is used to decrypt all content that was protected by the RMS cluster. If the SLC is lost, rights-protected content protected by the RMS cluster cannot be decrypted. If you are using a hardware security module (HSM) to store the SLC, you should contact the hardware manufacturer of the HSM and get instructions on how to back up the key. If you are using a private key password to protect the SLC, you can back up the certificate by using the Windows RMS Administration Web site.

To back up the RMS private key

  1. Log on to a server in the RMS cluster with a user account that is a member of the local Administrators group.

  2. Click Start, point to All Programs, point to Windows RMS, and then click Windows RMS Administration.

  3. Click Administer RMS on this Web site.

  4. In the Administration links section, click Trust Policies.

  5. On the Trust policies page, click Export.

  6. Click Save, and save the file to a location on your network that is backed up regularly.