RMS Web Services
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
RMS provides the server component of an RMS system. Its core functions are implemented as a set of Microsoft® ASP.NET Web services that run on Microsoft® Internet Information Services (IIS). The RMS Web services are exposed through the SOAP interface or through .NET Remoting.
The Web services provide:
Subenrollment of servers
Account certification of trusted entities
Licensing of rights-protected information
Administration functions of RMS
The following table describes the RMS Web services.
| Service | Description |
|---|---|
Subenrollment |
Provides subordinate server licensor certificates to servers in licensing-only clusters. These certificates allow the licensing-only cluster to issue publishing and use licenses. |
Account certification |
Provides rights account certificates to users. These certificates are required for users to obtain publishing and use licenses to author and consume rights-protected content. |
Activation proxy |
This service is retained for compatibility with the RMS version 1 client. It passes machine activation requests to the Microsoft Activation Service and returns lockboxes and RMS machine certificates to RMS version 1 clients. This service is not used by RMS clients with Service Pack 1 (SP1) or later. |
Publishing |
Issues publishing licenses, which allow authors to create and distribute rights-protected content. Also issues client licensor certificates, which allow users to publish rights-protected content without being connected to the internal network hosting RMS. |
Licensing |
Issues use licenses, which allow users to consume rights-protected content. |
Administration |
Allows the administrator to manage RMS. |
DrmRemote |
Allows the Web services to communicate with each other and with other components of the RMS system by exposing .NET Remoting. |
Decommissioning |
Makes previously rights-protected content unprotected and returns it to the client. This service is installed by RMS Setup, but the service does not have a corresponding virtual root in IIS until it is enabled by the administrator. Enabling this service disables all other services. |
In addition to the Web services, RMS installs a logging listener service. Each Web service sends logged data to the logging message queue. The logging listener service then transfers the logged data from the message queue to the logging database.
The Web service applications are located in IIS virtual directories. These virtual directories are installed on each RMS server, under the Web site that you selected during provisioning.
Authentication and access are configured separately for each virtual directory. In addition, access is configured separately for each Web service. For information about the security settings on virtual directories and Web services files, see Internet Information Services Support for RMS later in this subject.
For more information about each Web service, see RMS Software Components later in this subject.