RMS Client Technologies

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Client computers that are in an RMS deployment use the following technologies, which allow users to create, publish, and consume rights-protected content.

Technology Description Issued By For More Information

RMS-enabled applications

Required to create and publish rights-protected content. Applications can be developed specifically for RMS, or existing applications can be rewritten to work with RMS.

Non-Microsoft developers.

RMS-enabled applications

RMS machine certificates

Identify a particular computer as trusted by RMS.

Activation Service for RMS version 1.0. No service is required to obtain a machine certificate with RMS with SP1 or later.

RMS machine certificates

Lockboxes

Contain the computer's private key and a matching certificate, which contains the computer's public key.

Activation Service for RMS version 1.0. No service is required to obtain a lockbox with RMS with SP1 or later. The lockbox contains the computer's private key; it is the core security principal for encryption and decryption.

Lockboxes

Rights account certificates

Identify a particular user as trusted by RMS.

Rights account certification service.

Rights account certificates

Client licensor certificates

Allows a user to publish rights-protected content while they are disconnected from the network.

(Optional)

RMS publishing service.

Client licensor certificates

Publishing licenses

Define usage rights for a piece of content.

RMS publishing service or in the case of offline publishing the client licensor certificate can issue this license.

Publishing licenses

Use licenses

Allow a user to consume rights-protected content.

RMS licensing service.

Use licenses