Skip Navigation LinksConfigure-IRM-to-use-Azure-Rights-Management

Configure IRM to use Azure Rights Management


http://technet.microsoft.com/en-us/library/dn151475(v=exchg.150).aspx

Step 1: Use the Office 365 Admin Center to activate Azure Rights Management

 

By default, Azure Rights Management is disabled. To enable IRM features in Exchange Online, you need to activate it by using the Rights Management settings within the Office 365 administrative portal. For more information, see Activating rights management.


Step 2: Use the Shell to configure the RMS Online key sharing location in Exchange Online

 

Use the RMS key sharing URL corresponding to your location.

 

Location RMS key sharing location

North America

https://sp-rms.na.aadrm.com/TenantManagement/ServicePartner.svc

European Union

https://sp-rms.eu.aadrm.com/TenantManagement/ServicePartner.svc

Asia

https://sp-rms.ap.aadrm.com/TenantManagement/ServicePartner.svc

South America

https://sp-rms.sa.aadrm.com/TenantManagement/ServicePartner.svc

Office 365 for Government (Government Community Cloud)

https://sp-rms.govus.aadrm.com/TenantManagement/ServicePartner.svc 1

NoteNote:
1   Only customers who have purchased Office 365 for Government SKUs (Government Community Cloud) should use this RMS key sharing location.

 

This command configures the RMS Online key sharing location in Exchange Online for a customer located in North America. Replace the RMS Online key sharing location with the correct URL for your location from the above table.

Set-IRMConfiguration -RMSOnlineKeySharingLocation "https://sp-rms.na.aadrm.com/TenantManagement/ServicePartner.svc"

For detailed syntax and parameter information, see Set-IRMConfiguration.


Step 3: Use the Shell to import the Trusted Publishing Domain (TPD) from RMS Online

 

Run the following command to import the TPD from RMS Online.


Import-RMSTrustedPublishingDomain -RMSOnline -name "RMS Online"

For detailed syntax and parameter information, see Import-RMSTrustedPublishingDomain.


How do you know this step worked?

 

To verify that you have successfully configured IRM in Exchange Online to use Azure Rights Management service, run the Test-IRMConfiguration cmdlet. Among other things, the command checks connectivity with the RMS Online service, downloads the TPD, and checks its validity.

Test-IRMConfiguration -RMSOnline


Step 4: Use the Shell to enable IRM in Exchange Online

 

After you configure the RMS Online key sharing location in Exchange Online and import the RMS Online TPD, run the following command to enable IRM for your cloud-based email organization.

Set-IRMConfiguration -InternalLicensingEnabled $true

For detailed syntax and parameter information, see Set-IRMConfiguration.


How do you know this task worked?

 

To verify that you have successfully imported the TPD and enabled IRM, do the following:

  • Use the Test-IRMConfiguration cmdlet to test IRM functionality. For details, see "Example 1" in Test-IRMConfiguration.

  • Compose a new message in Outlook Web App and IRM-protect it by selecting Set permissions from the extended menu (More Options Icon).​


Rights Management General information:

Information Rights Management in Exchange Online​ http://technet.microsoft.com/en-us/library/jj983436(v=exchg.150).aspx 

Configure IRM to use an on-premises AD RMS server​ http://technet.microsoft.com/en-us/library/dn151477(v=exchg.150).aspx​ 

Configure IRM to use Azure Rights Management​ http://technet.microsoft.com/en-us/library/dn151475(v=exchg.150).aspx

Configuring Custom Templates for Azure Rights Management​ http://technet.microsoft.com/en-us/library/dn642472.aspx​