untitled

Size: px

Start display at page:

Download "untitled"

ありあにかどり
8 years ago
Views:

1 Microsoft RMS RMS : Rights Management Service White Paper

2 ( Windows Server 2003Active DirectoryIISSQL Server 2000RMS ) 1.RMS Server RMS RMS Server RMS Server RMS Server 2. RMS Server RMS Server

3 2.2 RM RM RMS Server Active Director (RMS (SCP)) RMS Server ( : 2 ) 3

4 2.3. IRM RMS Server URL HKLM Software Microsoft Office 11.0 Common DRM CorpCertificationServer CorpLicenseServer ( URLhttp://

5 3. OS Windows Server 2003 Enterprise Edition OS Windows XP Professional SP1a Windows Server 2003 Active Directory 1 1 Windows 2003 Enterprise Edition Windows Network Load Balancing 2 IP 1 1 IP IP RM RM RM Office Professional Enterprise Edition 2003 IRM RMS Server RMS Server URL URL URL RMS Server ( ) ( RM RM ) RM ( RM ) 5

6 SQL Server Active Directory () () RMS Server () Office(IRM) Office(IRM) Hive HKEY_LOCAL_MACHINE Key Software Microsoft Office 11.0 Common DRM Type Reg_sz Entry CorpCertificationServer Value /_wmcs/certification Hive HKEY_LOCAL_MACHINE Key Software Microsoft Office 11.0 Common DRM Type Reg_sz Entry CorpLicenseServer Value /_wmcs/licensing Activation RMS Hive HKEY_LOCAL_MACHINE Key Software Microsoft MSDRM ServiceLocation Activation Type Reg_sz Entry () Value /_wmcs/certification Hive HKEY_LOCAL_MACHINE Key Software Microsoft MSDRM ServiceLocation EnterprisePublishing Type Reg_sz Entry () Value > /_wmcs/ Licensing PC 1 2 6

7 RM RMS Active Directory 2 A B RM A B RM PC RM (1) A PC (2) RM DOACTIVATION=0 PC (msdrmclient.exe) msdrmclient.exe /C:"setup.exe DOACTIVATION=0" (3) PC actmachine.exe /n /p /l RM %SystemRoot% System32 DRM actmachine.exe /n /p c: wrmstemp.cab /l c: wrm.log CAB CAB ( c: wrmstemp.cab) RM %ALLUSERSPROFILE% Application Data Microsoft DRM (4) CAB (5) %SystemRoot% System32 rundll32.exe advpack.dll,launchinfsection secrep.inf,install,,n 7

8 (1) RM DRMS_Logging_corprights_80 DRMS_Log_Master 4.1. RM (DRMS_Log_Master ) dt_requesttime s_requestpath /_wmcs/certification/activation.asmx s_requesttype ActivationProxy.Activate s_requestuseraddress PC IP s_successoffailure Success (2) PC RM actmachine Success : Machine activated successfully. (3) PC %ALLUSERSPROFILE% Application Data Microsoft DRM CERT-Machine.drm RM PC RM RM PC B (1) A B PC (2) Office 2003(IRM)RM RM RM 8

9 4.1 (1) RM DRMS_Logging_corprights_80 DRMS_Log_Master 4.2. RM (DRMS_Log_Master ) dt_requesttime s_requestpath /_wmcs/certification/certification.asmx s_requesttype Certification.Certify s_requestuseraddress PC IP s_authenticatedid s_successoffailure Success (2) PC RM %UserProfile% Local Settings Application Data Microsoft DRM GIC--************.drm (Group ID Certify) RM CLC- -***********.drm Client Licensor Certify (: 9

10 4.1.3 PC PC B (1) A PC (2) Office 2003(IRM) B (1) PC Office 2003(IRM) Office 2003(IRM) PC %UserProfile% Local Settings Application Data Microsoft DRM CLC--************.drm 10

11 4.1.4 PC PC B (1) A B PC (2) Office 2003(IRM)(4.1.3 ) B (1) PC Office 2003(IRM) (2) DRMS_Logging_corplicense_80 DRMS_Log_Master 4.3. RM (DRMS_Log_Master ) dt_requesttime s_requestpath /_wmcs/licensing/license.asmx s_requesttype AcquireLicense s_requestuseraddress PC IP s_successoffailure Success 11

12 4.2 RMS Server PC (SQL Server) OS/SQL Server (SQL Server) OS/SQL Server (SQL Server) RMS(Config ) Config Config RMS Server Config SQL Server Config 12

13 4.2.4 (SQL Server) RMS(Directory Services ) Directory Services Directory Services RMS Server Directory Services SQL Server Directory Services (SQL Server) RMS(Logging ) Logging Logging RMS Server RMS Server MSMQ Logging SQL Server Logging (SQL Server) RMS(Config ) Config Config RMS Server Config SQL Server Config (SQL Server) RMS(Directory Services ) Directory Services Directory Services RMS Server Directory Services SQL Server Directory Services 13

14 4.2.8 (SQL Server) RMS(Logging ) Loggin Logging RMS Server RMS Server MSMQ Logging SQL Server Logging () 1 OS / RMS () OS / RMS () 1 OS / RMS 1 14

15 () OS / RMS 4.3 (4.1 ) RM RM ()()( ) 15

16 RM RM RM RM DRMS_Logging_corprights_80 DRMS_Log_Master 5.1. RM (DRMS_Log_Master ) dt_requesttime s_requestpath /_wmcs/certification/activation.asmx s_requesttype ActivationProxy.Activate s_requestuseraddress PC IP s_successoffailure Success 5.2. RM (DRMS_Log_Detail ) UserHostName BatchedRequestIndex 0 IssuedXrMLDocumentI HidXml RM DRMS_Config_corprights_80 UD_Machine 5.2. UD_Machine i_machineid b_pubkeyhash dt_createdate ID RM i_machineid PC OS HWID i_machineid 16

17 RM % ALLUSERSPROFILE% Application Data Microsoft DRM CERT-Machine.drm RM RM DRMS_Logging_corprights_80 DRMS_Log_Master 5.3. RM (DRMS_Log_Master ) dt_requesttime s_requestpath /_wmcs/certification/certification.asmx s_requesttype Certification.Certify s_requestuseraddress PC IP s_authenticatedid s_successoffailure Success 5.4. RM (DRMS_Log_Detail ) [email protected] IssuedXrMLDocumentIsuuerChain ReceivedXrMLDocumentIsuuserChain SID S-1-********** Persistent True 17

18 ActiveDirecotry RM DRMS_Config_corprights_80 UD_WindowsAuthIdentities,UD_Users 5.2 UD_WindowsAuthIdentities i_userid s_sid ID SID 5.3. UD_Users i_userid b_keydata i_key_datalength b_publickey i_encryptiondbid s_certiicate dt_expiration dt_temporaryexpiration f_modified i_quota i_waitdays dt_lastconsumption dt_createdate ID i_userid Active Directory ID ID OS RAC RM RM ID ID RMS DRMS_Config_corprights_80 UD_UserMachine 5.4. UD_UserMachie i_machineid ID i_userid ID dt_createdate 18

19 Office 2003IRM RM RM %UserProfile% Local Settings Application Data Microsoft DRM () -{58c940eb;k650e;k4f50;ka222;kd828601c3cbf}-{0c073db3;ka9bd;k4cd7;kba19;k2aa394d052a8}.drm () CLC- -{6a7a2274;k0150;k4305;k9525;k44f76dfad094}-{e1756b03;k0f7f;k4790;k98a6;kc64fce696257}.drm 19

5.1.3 IRM (RMS ) 5.1.4 IRM 5.2. DRMS_Logging_corplicense_80 DRMS_Log_Master 5.5. (DRMS_Log_Master ) dt_requesttime s_requestpath s_requesttype s_requestuseraddress s_successoffailure /_wmcs/licensing/license.

20 5.1.3 IRM (RMS ) IRM 5.2. DRMS_Logging_corplicense_80 DRMS_Log_Master 5.5. (DRMS_Log_Master ) dt_requesttime s_requestpath s_requesttype s_requestuseraddress s_successoffailure /_wmcs/licensing/license.asmx AcquireLicense PC IP Success 5.6. RM (DRMS_Log_Detail ) [email protected] IssuedXrMLDocumentIsuuerChain ReceivedXrMLDocumentIsuuserChain SID S-1-********** Persistent True 20

21 5.2 RM RM RM RM RM RM

22 5.3 RM RM ) 2) ) 2) RMS(Config RMS(Directory Service RMS(Logging () () 1) 2) 1) RM RM 2) HKCU Software Policies Microsoft Office 11.0 Common DRM requireconnection 22

23 5.3.1 RMS RMS ( 7 RMS ) Activation ( 8.RM ) ( 12) RM Error: Machine activation failed. Callback returned error code 0x8004cf47 Error: Machine activation failed. Callback returned error code 0x8004cf44 RM ( 9.Office 2003IRM RM ) RM ( 9.Office 2003IRM RM ) ( 10. Office 2003IRM ) ( 11. Office 2003IRM ) RMS 23

24 5.3.2 RMS(Config ) Config RMS 5.3.1() RMS(Directory Services ) Directory Services Directory Services Active Directory Active Directory Directory Services Directory Services Directory Services LDAP RMS Server Directory Services Directory Services Directory Services 24

25 5.3.4 RMS(Logging ) Logging MSMQ MSMQ (:MSMQ RMS ( 13.) - ( MSMQ ) Logging ( 12) Logging RMS Server MSMQ RMS 25

26 5.3.5 () () RMS 5.3.1() 26

27 5.4 RM RM ) 1) ) 3) RMS(Config RMS(Directory Service RMS(Logging 1) 1) RMS(Config 2) 3) RMS(Directory Service RMS(Logging () () 1) 1) () () 2) 3) 1) RM RM 2) 3) HKCU Software Policies Microsoft Office 11.0 Common DRM requireconnection 27

28 5.4.1 RM RM RMS RMS ( 7 RMS ) Activation ( 8.RM ) ( 12) RM Error: Machine activation failed. Callback returned error code 0x8004cf47 Error: Machine activation failed. Callback returned error code 0x8004cf44 RM ( 9.Office 2003IRM RM ) RM ( 9.Office 2003IRM RM ) RM RM RMS 28

29 5.4.2 RMS RMS ( 7 RMS ) ( 12) ( 10. Office 2003IRM ) ( 11. Office 2003IRM ) RM RM RM RM RMS 29

30 5.4.3 RMS(Config ) RM RM RMS 5.4.1() RMS(Directory Services ) Directory Services 5.3.3( RMS(Directory Services ) ) RMS(Logging ) ( RMS(Logging ) )) RMS(Config ) () )) RMS(Directory Services ) Directory Services 5.3.3( RMS(Directory Services ) ) 30

31 5.4.8 RMS(Logging ) ( RMS(Logging ) )) () () RM RM RMS 5.4.1() () () () )) 31

32 6. 7. RMS 8.RM 32

33 9.Office 2003IRM RM 10. Office 2003IRM 11. Office 2003IRM 33

35 RM RM RMS(Config RMS(Directory Service RMS(Logging RMS(Config RMS(Directory Services RMS(Logging () () () 35

36 () 36

37 "abc.local" abc.co.jp No OS IP Windows Server 2003 Enterprise - ABCDC Windows Server 2003 Enterprise Exchange 2003 Enterprise ABCEX IP (1) Windows Server 2003 Enterprise Windows RightManagerment 1.0 ABCRC / (2) Windows Server 2003 Enterprise Windows RightManagerment 1.0 ABCRC / Windows Server 2003 Enterprise SQL Server 2000 Enterprise ABCDB IP (1) Windows Server 2003 Enterprise Windows RightManagerment 1.0 ABCRL / (2) Windows Server 2003 Enterprise Windows RightManagerment 1.0 ABCRL / Windows Server 2003 Enterprise SQL Server 2000 Enterprise ABCDB

38 Router Cisco / RM (1) Windows XP Professional SP1a Office Professional 2003 ABCCL01 DHCP ".local" xyz.co.jp) Windows Server 2003 Enterprise XYZSV RM Windows XP Professional SP1a Office Professional 2003 XYZCL01 DHCP Router BLR-TX / DNS DNS Windows Server 2003 Enterprise DNS LOCALDNS

39 2 39

Configuration Manager (SCCM) + IT IT PC IT PC PC Windows XP OS 移行は簡単! P.7 SCCM / SCCM PC OS Configuration Manager PC PC 2

System Center PC Configuration Manager (SCCM) + IT IT PC IT PC PC Windows XP OS 移行は簡単! P.7 SCCM / SCCM PC OS Configuration Manager PC PC 2 ! /! PC PC PC 1 PC PC! PC PC SCCM! PC Windows Embeded Windows