Rights management setup
would someone tell me the rights management setup step by setp? thank you very much!
CREATE USER WITH ‘RIGHTS MANAGEMENT USER’ ROLE
Using the LiveCycle AdminUI, create a local user with the role “LiveCycle Rights Management User”
ENSURE HTTPS ACCESS TO THE RIGHTS MANAGEMENT WEBUI
Please note that the ‘Administrator’ user cannot login to Rights Management by default.
If the server is using a self-signed certificate, import the certificate to the local Windows certificate store. If this is not done, Acrobat will throw this error:
“Unable to connect to the service. SSL protocol error. Certificate is either invalid or common name or authority are not recognized.”
Launch your browser. Point it to the SSL over HTTP URL of the server such as follows:
https://lces2.adobe.com:9443/edc/Login.do
In IE8, you will get a message that says “There is a problem with this website’s security certificate.”
1) Click “Continue to this website (not recommended).”
2) At the top, to the right of the URL field, there shoul be a button that now says “Certificate Error”.
3) Click it. Then click the link “View Certificates”.
4) Click the button ‘Install Certificate”
5) Let the wizard guide you through the install. Choose “Automatically select the certificate store based on the type of certificate”.
6) If everything went fine, you should get a message that says “The import was successful”.
7) Click OK
8) Load the same URL again (https://lces2.adobe.com:9443/edc/Login.do). This time you should not get a certificate error. Instead, the Rights Management login page should load.
In Windows Vista, instead of letting IE choose the certificate store based on the type of certificate, choose the radiobutton ‘Place all certificates in the following store’, click ‘Browse’ and then choose ‘Trusted Root Certification Authorities‘.
For Firefox, you choose the link “Add an exception”. Click ‘Get Certificate” and then “Confirm Security Exception”.
CONFIGURE ADOBE READER OR ADOBE ACROBAT
- Choose the menu option Advanced->Security Settings
- Highlight “Adobe LiveCycle Rights Management Servers” and click ‘New’
- Put something useful in the name field such as “Test Adobe RM”.
The Server Name should be the fully resolvable DNS name of your server, or that of the Reverse Proxy.
- Change port from 443 to the SSL port of the appserver instance that hosts LiveCycle. This can also be the port on which SSL is configured for the Reverse Proxy (usually 443). In our example, it is 9443.
- Click “Connect to this Server”
CONFIGURE BASE URL FOR POLICIES
Login to the LiveCycle AdminUI. Navigate to Services->LiveCycle Rights Management->Configuration->Server Configuration. Change the ‘Base URL’ to a valid URL such as https://lces2.adobe.com:9443. This URL is a CRITICAL part configuration. If this URL becomes invalid at a later time due to domain registration expiry, corporate acquisitions, server certificate expiry etc, all of the documents published up to that point with this URL will be become totally useless.
Cheers,
Vipin
Similar Messages
-
Error on Loading Credit Management Setups using iSetup in target instance
Hi All,
I am trying to migrate Oracle credit management functional setups(Scoring model, Checklist, Automation rules) from source instance to target instance. I am trying to achieve this by the usage of iSetup. Once the Load is done, I am getting the following error and the setups are not migrated. This error comes up only for Credit management Setups. Not for other functionalities. Please help me out on this.
+---------------------------------------------------------------------------+
Application Implementation: Version : 12.0.0
Copyright (c) 1979, 1999, Oracle Corporation. All rights reserved.
AZR12LOADER module: iSetup R12 Loader
+---------------------------------------------------------------------------+
Current system time is 09-OCT-2013 03:15:18
+---------------------------------------------------------------------------+
Concurrent Request Parameters
RELOAD_REQUEST_ID=
DBC_FILE_NAME=DEVF.dbc
SNAPSHOT_REQUEST_TYPE=E
SNAPSHOT_NAME=RAC Credit Management Test
RELOAD_METHOD=
REQUEST_TYPE=L
IS_REMOTE=Y
JOB_NAME=RAC Credit Management Test1
USER_NAME=DEPPS
Downloading the extract from central instance
Successfully copied the Extract
Time taken to download Extract and write as zip file = 0 seconds
Validating Primary Extract...
Parsing driver.xml
Time taken to parse the Driver file and construct setup objects:6 milliseconds
Sorting Apis based on their dependency...
Time taken to sort the Apis=12 milliseconds
Printing sorted Apis
Load Sequence 1
1)AR_CMGT_Scores
Oct 9, 2013 3:15:48 AM oracle.adf.share.config.ADFConfigFactory findOrCreateADFConfig
INFO: oracle.adf.share.config.ADFConfigFactory No META-INF/adf-config.xml found
Name: AR_CMGT_Scores
Type: BC4J
Path: oracle.apps.ar.ispeed.creditmgt.scores.server.ScoresAM
Time Taken(seconds): 2.0
Importing rows from xml file, and validating rows ......
Message not found. Application: AZ, Message Name: AZW_FWK_USER_ROW_EXCEPTION. Tokens: VONAME = Scores; KEY = Score Model Id = 'null'
; EXCEPTION = oracle.jbo.RowCreateException: JBO-25017: Error while creating a new entity row for ScoresEO.
java.lang.Integer incompatible with java.lang.Long
Message not found. Application: AZ, Message Name: AZW_FWK_USER_ROW_EXCEPTION. Tokens: VONAME = Scores; KEY = Score Model Id = 'null'
; EXCEPTION = oracle.jbo.RowCreateException: JBO-25017: Error while creating a new entity row for ScoresEO.
java.lang.Integer incompatible with java.lang.Long
Message not found. Application: AZ, Message Name: AZW_FWK_USER_ROW_EXCEPTION. Tokens: VONAME = Scores; KEY = Score Model Id = 'null'
; EXCEPTION = oracle.jbo.RowCreateException: JBO-25017: Error while creating a new entity row for ScoresEO.
java.lang.Integer incompatible with java.lang.Long
Message not found. Application: AZ, Message Name: AZW_FWK_USER_ROW_EXCEPTION. Tokens: VONAME = Scores; KEY = Score Model Id = 'null'
; EXCEPTION = oracle.jbo.RowCreateException: JBO-25017: Error while creating a new entity row for ScoresEO.
java.lang.Integer incompatible with java.lang.Long
Message not found. Application: AZ, Message Name: AZW_FWK_USER_ROW_EXCEPTION. Tokens: VONAME = Scores; KEY = Score Model Id = 'null'
; EXCEPTION = oracle.jbo.RowCreateException: JBO-25017: Error while creating a new entity row for ScoresEO.
java.lang.Integer incompatible with java.lang.Long
Message not found. Application: AZ, Message Name: AZW_FWK_USER_ROW_EXCEPTION. Tokens: VONAME = Scores; KEY = Score Model Id = 'null'
; EXCEPTION = oracle.jbo.RowCreateException: JBO-25017: Error while creating a new entity row for ScoresEO.
java.lang.Integer incompatible with java.lang.Long
Message not found. Application: AZ, Message Name: AZW_FWK_USER_ROW_EXCEPTION. Tokens: VONAME = Scores; KEY = Score Model Id = 'null'
; EXCEPTION = oracle.jbo.RowCreateException: JBO-25017: Error while creating a new entity row for ScoresEO.
java.lang.Integer incompatible with java.lang.Long
Message not found. Application: AZ, Message Name: AZW_FWK_USER_ROW_EXCEPTION. Tokens: VONAME = Scores; KEY = Score Model Id = 'null'
; EXCEPTION = Updates are not supported by this API.
74 rows processed, now posting changes to the database ......
Transaction committed.
Processed API:AR_CMGT_Scores
Status: WARNING
Concurrent program completed.
+---------------------------------------------------------------------------+
Start of log messages from FND_FILE
+---------------------------------------------------------------------------+
+---------------------------------------------------------------------------+
End of log messages from FND_FILE
+---------------------------------------------------------------------------+
+---------------------------------------------------------------------------+
Executing request completion options...
Finished executing request completion options.
+---------------------------------------------------------------------------+
Concurrent request completed
Current system time is 09-OCT-2013 03:15:50
+---------------------------------------------------------------------------+Vivek,
Thanks for the update.
Regards,
Hussein -
Rights Management Error 0x80070533
Hi,
I am trying to setup Rights Management. I have an Exchange account (Online Services) with Microsoft and I just added on the Rights Management Service, but I keep getting the message that my account is disabled when trying to protect a file on the Windows
Desktop?
I'm running Windows 8.1 64bit with Media Centre.
Exact error message: This user can't sign in because this account is currently disabled. Error Code: 0x80070533.
Any ideas how to fix this?
Screenshots:
Online Services:
Error:
MichaelHi Michael,
Are you still seeing this error?
If yes, please do the following -
1. We've released an updated version of the app. You can get it here - http://www.microsoft.com/en-us/download/details.aspx?id=40857
2. If the error still persists, please use the 'Email error log file' button on the screen to send us the error logs and someone will get back to you promptly.
Thanks,
Shubha -
Co-existence of AD RMS On-Premises and Azure Rights Management
Recently, I was part of an internal IT project to implement AD RMS on-premises on top of Windows Server 2012 R2. We had created a template, assigned users to it and the template has been in use for about 2 months without any issues.
I was then reading about the Azure Rights Management Service which had been released and we were eligible for with our Office 365 subscription. I went through all the documentation and went ahead with implementing it yesterday not seeing any caveats based
on our current setup. Well, today, I received word from users that they were not able to see the original template they were using when trying to protect a document, only the new "Confidential" and "Confidential - View Only" templates that
I know are provided by the Azure Rights Management Service.
I have scoured the web and the Microsoft IT forums, but cannot find any information about restrictions on using on-premises AD RMS along with the Azure Rights Management Service at the same time. I really like the idea of using the Azure version as then
our corporate users can get their policies on all their devices and when outside the network as well as the great new sharing options for other users outside the organization. However, I also need to have some more granular control over at least one template
which I can do with the on-premises AD RMS.
My question is: can you have both rights management services running at the same time? At this point, I may have to disable the Azure Rights Management Service in order to restore the previous functionality that my users are relying on, but I'd like to have
both options available if possible and short of that, maybe migrate over to the Azure hosted version. In addition, is there any documentation that includes considerations for migrating from AD RMS to Azure RMS?"In addition, is there any documentation that includes considerations for migrating from AD RMS to Azure RMS?"
Just in case you missed the announcement, migration from AD RMS to Azure RMS is now supported:
Blog post announcement:
http://blogs.technet.com/b/rms/archive/2015/01/29/january2015majorupdate.aspx
Migration documentation:
https://technet.microsoft.com/en-us/library/Dn858447.aspx -
Office 2013 Rights Management Services??
I am trying to make a powerpoint file I have created in Office 2013 (on Windows 7 64 bit) a read-only file so that presenters cannot change content, but can still view and present the file normally.
This was very easy to do with previous versions of Office, but in 2013 I am asked to sign in to "Rights Management Services" using my live ID. I have no problem with that, but it has not worked for me yet - I get the following error:
Any advice or help would be much appreciated!
A couple notes: I can still encrypt with a password, but this would not allow presenters to open, view and present the file without the password.Hi Dan,
It seems that PowerPoint doesn't have Restrict Editing option available as described here: https://support.office.com/en-us/article/Protect-your-document-workbook-or-presentation-with-passwords-permission-and-other-restrictions-05084cc3-300d-4c1a-8416-38d3e37d6826?ui=en-US&rs=en-US&ad=US
So the only option I see to complete your scenario is to use RMS - Rights Management Servers. However RMS can be installed as on-premises service, so you have to deploy and configure AD RMS server (it is not easy as it requires certificates, SQL, designing,
etc).
You can other options as weel - for example use Office 365 E3 or E4 licences. Those include Azure RMS subscription. If you have such license assigned to your user account, once you get prompt for credentials - type your O365 user credentials.
Another option is to use RMS for individuals. Go to the page http://aka.ms/rms and register your private account to use RMS and then you would be able to sign in to RMS Service with your private e-mail account. Be advised that not all private e-mail domains
are supported. For example you will not be able to register your @gmail.com or @hotmail.com account...
Did my post help you or make you laugh? Don't forget to click the Helpful vote :) If I answered your question please mark my post as an Answer. -
Steps to configure Information Rights Management in SharePoint 2013 On-Premise
Hi,
What are the steps to configure Information Rights Managment [IRM] on SharePoint 2013 On-Premise.
Regards,2. PHases
1. you will have to configure a IRM server
2. You will have to integrate IRM iwth sp server.
Below article should explain all
http://msmvps.com/blogs/ivansanders/archive/2012/06/08/check-out-the-weather-forecast-for-teched-2012.aspx -
Solution Manager Setup & Configuartion
Hi There
This is a question on Solution Manager setup.
We are in the process of configuring Solution manager. Basically we have installed two Sol Man 7.0 (Ehp1) systems development (SOD) and Production (SOP)
We are insterested in configuring EWA and also would want CCMS monitoring (diagnostics) for our R3, SCM,and BI systems and we are not implementing CHARM, Service Desk or any other functionalities. I would like to know how to proceed with utilising the Dev and prod Solution manager systems for acheiving the above. I would like to get some suggestion on which system should be used to configure the EWA and monitoring. These are the two scenarios that I am considering and would like some suggestion on.
Scenario1:
create Dev Landsacpe & Solution for Dev systems in SOD and Prod Landsacpe & Solution for Production systems in SOP
Turn on EWA and Diagnostics for Prod system in SOP
Scenario2:
create Dev Landsacpe & Solution for Dev systems in SOD and a master landscape and solutions for all the systems (Dev& Prod) in SOP. Turn on EWA and Diagnostics for Prod systems in SOP
What are the pros and cons for the above options ? Is there any other better options ?
NOTE: We do not have PI(or XI) and have no other Landsacpe config except for BI systems which have been installed as a local SLD. Our R3 4.7 and SCM are on SAP BASIS 620. The idea is to turn on EWA and monitor only the production systems.We are not implementing any Business Solutions in Sol Man system.
Thanks
sapkidHi,
>
sapkid wrote:
> Scenario1:
> create Dev Landsacpe & Solution for Dev systems in SOD and Prod Landsacpe & Solution for Production systems in SOP
> Turn on EWA and Diagnostics for Prod system in SOP
> sapkid
This is the SAP recommended way to create your solutions. All Dev Systems into one solution and All PRD systems into a separate solution.
check this note 1257308 for EWA FAQs.
Check these Best Bractices for your BI monitoing
https://websmp209.sap-ag.de/~sapidb/011000358700001121992008E
http://service.sap.com/~sapidb/011000358700001123042008E
Hope this helps.
Feel free to revert back.
-=-Ragu -
I am unable to download my PDF. It is asking for my adobe livecycle rights management credentials. I have no clue what that is. I am using a PC windows7. Please help me.
Downloading from where? How exactly are you downloading?
Can you post a screenshot of that message: https://forums.adobe.com/thread/1070933 -
Problem with adobe livecycle rights management es2 extension for microsoft office
occurs several times an error message in Microsoft Office Excel that says it has experienced a problem with the complement of adobe livecycle rights management es2 extension for microsoft office if the message has appeared several times should disable the add and check for an update.
will refer to this error? as it has sought to upgrade and there is no error and remains not only to excel but also for word.
thanks in advanceCurrently, the Rights Management ES Extensions for Microsoft Office plugin is only supported on English, French, Geman and Japanese versions of Office.
http://help.adobe.com/en_US/livecycle/8.2/lcrmext_releasenotes.htm#DocumentationSet
Steve -
LiveCycle Designer ES Rights Management
Hi
I am new to LiveCycle Designer ES (included in my copy of Acrobat 9 Pro) and am still trying to figure out if I can utilize the rights management server features (or if I would need to based on available features). While I suspect that this would require purchase of software additional to what is included in the Acrobat 9 Pro package, I am not sure about this. I've read what is available in the help guide and online, but I am still unclear about use of these extra features. If setting up a policy and restricting PDF content to make it more secure is available, this may be useful in a particular health project.
I have a website (latest Windows server) managed by an ISP and am wondering if I could use this shared server as a LifeCycle Rights Management server. If I created a connection and policy for this server (not sure what is involved here), could I use it to better secure a PDF or form with sensitive (health) information?
Any help, suggestions for reading, would be appreciated. I'm afraid I am not understanding this set of features, how to use them or if they can be used without additional purchase of software.
Kind Regards,
StephenYes additional software is required, as well as a https link to the server. The Rights management server is part of the LiveCycle suite and it will allow you to define policies that can be applied to various PDFs. These policies are kept separate from the PDF and are accessed via the https link I mentioned earlier. When opening the PDF the user must authenticate and based on his/her permissions in the policy the interface in Acrobat/Reader will adjust accordingly. For example if print is disabled then the print buttons will be greyed out for that form only. Because the policy is separated from the PDF you can change the policy on the fly and the next time the user opens that document the new rights will be applied. There is also a provision for working offline (no access to the server).
This is just a 10000 foot view you may want to contact a Sales rep and have them start a trial for you. -
Digital Signature and Rights Management
Hello all,
I'm following the document below and have a couple of questions on how to achieve that objective, that is how to provide a persistent document security.
http://www.adobe.com/security/pdfs/acrobat_livecycle_security_wp.pdf
I understand that I need to protect the PDF first using the Rights Management, then digitally sign it afterwards. This is pretty straight forward when using LC Digital Signatures, just build a process in LC Workbench, unlock the PDF temporary, send to Digital Signature operation, get it back and return the RM.
But when I use a third part digital signature solution? Is it possible to use another digital signature solution to get this - by defining a call to a webservice in workbench to sign the PDF.
For information: this digital signature solution complies with digital signatures in PDF.
Thanks in advance!
DiegoHi Lee,
It's some module within IBM Lotus Notes. I'm trying to do the following in the Workbench:
With a RM document, Unlock it then invoke this 3rd part webservice in order to sign it. It's not working so far.
But if I follow your suggestion, when I re-RM the PDF wouldn't this invalidate the Digital Signature?
Thanks for the quick reply! -
How to define a Rights Management process "Protect Document" with an watched folder?
Hello.
I try to build a process in Workbench 11.0, that uses the Protect Document operation of Rights Management.
The process should use a watched folder as start point.
My problem is, how to fill the operations parameters (Input Doc, Document name, Policy set name, Policy name, ...)
JürgenFirst -- by default iTunes stores its Library in "My Documents\My Music\iTunes\iTunes Library.itl", and its Music in "My Documents\My Music\iTunes\iTunes Music\".
Make sure you have a "iTunes Library.itl" after the restore -- if not, and your backup software supports it, try an older version of the file. If your backup software only keeps the last version of the file -- well, then you are SOL, and you will have to re-add the files to the Library. You will also have to rebuild your playlists, ratings, etc.
Since you have "very few files" in the iTunes Music directory -- either you weren't storing your music there, or your backup didn't work. Are you sure you weren't using a non-default location for your music files?
If you had a hardware problem then it is likely that your backup stopped working properly at some point. This is why you need a rotating backup scheme and periodic archiving of files to non-writeable media (If you have the time/money) -
Adobe Reader for iOS and Android & Rights Management
This week's release of Reader for iOS and Android devices incorporates support for accessing files secured by Adobe LiveCycle Rights Management.
As you are probably familiar, LiveCycle Rights Management protects sensitive documents by encrypting them with industry-standard AES encryption and enabling central management of their access permissions. Protections persist even when documents are accidentally distributed via email, the cloud, or saved on a lost mobile device.
Many of the core capabilities that you are used to on the desktop versions of Acrobat and Reader are now supported when you are on the go on your tablet or mobile phone. We intend to incorporate additional functionality in future releases of these mobile devices and look forward to your feedback.
We've had several questions thus far about how this works. More information about the product, as well as a link to an FAQ can be found at:http://blogs.adobe.com/security/2011/10/just-released-adobe-reader-10- 1-for-ios-and-android.html
JonathanHello Jonathan,
is there an way to trigger iOS download to immediately open using "Adobe Reader"
instead of using the default Previewer (showing an plain empty white window) and then re-open it using "Open with" ?
Is there an MIME-Type to indicate IRM-protected PDF-files?
Thanks, -
How to apply special right to the PDF file using the LiveCycle Rights Management Server.?
I want to edit bar code field data using Adobe Reader. Bar Code field was designed and data was changing using Acrobat X1 Professional (Trial Version). But can't do so in adobe reader.I think that product has nothing to do with it. You would use LiveCycle Reader Extensions.
-
Adobe LiveCycle Rights Management credentials needed to view protected pdf.
I recently downloaded a transcript and am not able to view it (in Adobe Reader) because I need to enter Adobe LiveCycle Rights Management credentials. How do I get these/access this information?
From the creator of the pdf.
Maybe you are looking for
-
I deleted my microsoft office:mac 2011 word from my toolbar. I have Mac OS X version 10.6.8. I tried to reinstall but it won't work. This has never happened before. I get an error message each time. Please help!!!!!!!!!!!!!! I don't have time mach
-
Create error in crmd_order
hi all , i am not getting list of transections in crmd_order while creating a new transection. I have tried all the options from DEFINE TRANSECTION TYPE in spro path- spro-> crm->transection->basic settings->define transection type.. thanks in advanc
-
Process: iPhoto [11785] Path: /Applications/iPhoto.app/Contents/MacOS/iPhoto Identifier: com.apple.iPhoto Version: 9.2 (9.2) Build Info: iPhotoProject-626000000000000~2 Code Type: X86 (Native) Parent Process
-
Gamers Club Not Applying to Online Purchase
This evening I went online to purchase a PS4 game and my GCU discount isn't being applied. I purchased my GCU subscription during the deal you had when Mortal Kombat X was released. I brought the card I received in the mail to the store and they info
-
Check whether the selected character is an xml open/close tag character...
Hi Everyone, I am using InDesign CS4 and i need some help from you. Is there any better way to check the selected character is an XML open/close tag character in the text instead of using the unicode. Thanks in advance Thiyagu