RMS stopped. Users told "only documents created in a signed application can be opened in a signed application"

Question

Hi
I hope you can help and that this is the right forum.
We have a RMS 1.0 sp1 server which has stopped working.
Users get "only documents  created in a signed application can be opened in a signed application" when trying to protect a document in word or Outlook, and are unable to open previously protected documents.
C:\Users\username\Local Settings\Application Data\Microsoft\DRM - only has the one file in it which is DRM-Machine. the .eul .CLC and .Gic files are missing from this folder.
The server running the rms has an event id 82. " the callers machine certificate has a certificate chain that is not valid"
I ran an irmcheck on the local machine which showed " No user Certificate"
I can connect to the rms server urls , both licensing and certificate with no errors and IE shows the zone to be local intranet.
Can anyone see what my problem might be and suggest why the workstations are not getting their certs and allowed protection? What else should I be checking?
Best Regards
Steen

Answer 1

Hi
Here is the answer which resolved my situation, I hope it helps yours.
Guybrush-Threepwood I've marked your post as helpful as we had installed SP2 but it was not installed correctly and installing correctly was part of the solution.
PROBLEM:
Client began seeing the error:
“Only documents created in a signed application can be opened in a signed application”
On the server we were getting events:
“The callers machine certificate has a certificate chain that is not valid”
CAUSE:  
Servers running RMS before SP2 can no longer get a valid Server Licensor Certificate.
RESOLUTION:
1. Install RMS v1 SP2 from:
http://www.microsoft.com/en-us/download/details.aspx?id=14329
2. Locate and then click the following key in the registry.
For the enrollment URL on x86 versions of Windows Server 2003:
HKEY_LOCAL_MACHINE\Software\Microsoft\DRMS\1.0\
For the enrollment URL on x64 versions of Windows Server 2003:
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\DRMS\1.0\
3. On the Edit menu, point to New, and then click String value.
4. Type EnrollmentURL, and then press Enter.
 5. On the Edit menu, click Modify.
 6. Type
https://activation.drm.microsoft.com/enrollment/enrollservice.asmx, and then click OK.
 7. On the Edit menu, point to New, and then click String value.
8. Type CloudGicURL, and then press Enter.
 9. On the Edit menu, click Modify.
 10. Type
https://certification.drm.microsoft.com/certification/certification.asmx, and then click OK.
11. Go into the RMS Web interface and renew the SLC
HTH