4.5.3 Client Licensor Certificate Example
The following is an example of a Client Licensor Certificate (CLC).
-
<XrML xmlns="" version="1.2"> <BODY type="LICENSE" version="3.0"> <ISSUEDTIME>2010-06-11T20:52</ISSUEDTIME> <DESCRIPTOR> <OBJECT type="Client-Licensor-Certificate"> <ID type="MS-GUID">{1c4a57b8-94cd-4174-b555-881d705ee5b5}</ID> </OBJECT> </DESCRIPTOR> <ISSUER> <OBJECT type="MS-DRM-Server"> <ID type="MS-GUID">{96c4ca87-b3ff-4ded-9c15-53272e26396f}</ID> <NAME>CONTOSO-RMS</NAME> <ADDRESS type="URL">HTTP://rms:80/_wmcs</ADDRESS> </OBJECT> <PUBLICKEY> <ALGORITHM>RSA</ALGORITHM> <PARAMETER name="public-exponent"> <VALUE encoding="integer32">65537</VALUE> </PARAMETER> <PARAMETER name="modulus"> <VALUE encoding="base64" size="1024">q8uQpk4C1HSB3bbyBskYRn8o1bJbVWYVVb0CFtFdW7qlbNojWrIx8nE1YPGAmuzJLFiIxBK6vRNbeOC0WX3K4sAKRGbKEXRFPq5WQLFAXdzG5f71uohhInRrghCM6F1s9ww10Y3gQ3G4k6F/WktX8ttmfeKHzcrniCYMId0vvJg=</VALUE> </PARAMETER> </PUBLICKEY> <SECURITYLEVEL name="Server-Version" value="6.0.0.0" /> <SECURITYLEVEL name="Server-SKU" value="RMS 2.0" /> </ISSUER> <DISTRIBUTIONPOINT> <OBJECT type="License-Acquisition-URL"> <ID type="MS-GUID">{0F45FD50-383B-43EE-90A4-ED013CD0CFE5}</ID> <NAME>DRM Server Cluster</NAME> <ADDRESS type="URL">http://rms/_wmcs/licensing</ADDRESS> </OBJECT> </DISTRIBUTIONPOINT> <DISTRIBUTIONPOINT> <OBJECT type="Extranet-License-Acquisition-URL"> <ID type="MS-GUID">{94BF969A-CA04-44d6-AA96-51071281FEF2}</ID> <NAME>DRM Server Cluster</NAME> <ADDRESS type="URL">http://rms.contoso.com/_wmcs/licensing</ADDRESS> </OBJECT> </DISTRIBUTIONPOINT> <ISSUEDPRINCIPALS> <PRINCIPAL internal-id="1"> <OBJECT type="Group-Identity"> <ID type="Windows">S-1-5-21-3270430776-546919264-923996561-1118</ID> <NAME>owner@contoso.com</NAME> </OBJECT> <PUBLICKEY> <ALGORITHM>RSA</ALGORITHM> <PARAMETER name="public-exponent"> <VALUE encoding="integer32">65537</VALUE> </PARAMETER> <PARAMETER name="modulus"> <VALUE encoding="base64" size="1024">O5bWmHBkyBvEEWvENoqVkma20zURn0kXR87VIaNwnnBZCZpRIBrnBx8cvMhOIv6SEu0ei2ZCat9y6/6atYbfkRVhcFJqZFz/JVlKD3O/zyS4FZV6SQvrxdl+NDi/O5mYLGPs+yRBONi7XTvH7H1r/8Go/eZTZ6lSM+ZgUXBFts8=</VALUE> </PARAMETER> </PUBLICKEY> </PRINCIPAL> </ISSUEDPRINCIPALS> <WORK> <OBJECT type="Client-Licensor-Certificate"> <ID type="MS-GUID">{1c4a57b8-94cd-4174-b555-881d705ee5b5}</ID> </OBJECT> <RIGHTSGROUP name="Main-Rights"> <RIGHTSLIST> <RIGHT name="ISSUE"> <CONDITIONLIST> <TIME> <RANGETIME> <FROM>2010-06-10T20:50</FROM> <UNTIL>2011-06-11T20:50</UNTIL> </RANGETIME> </TIME> <ACCESS> <PRINCIPAL internal-id="1"> <ENABLINGBITS type="sealed-key"> <VALUE encoding="base64" size="6144">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</VALUE> </ENABLINGBITS> </PRINCIPAL> </ACCESS> </CONDITIONLIST> </RIGHT> </RIGHTSLIST> </RIGHTSGROUP> </WORK> </BODY> <SIGNATURE> <DIGEST> <ALGORITHM>SHA1</ALGORITHM> <PARAMETER name="codingtype"> <VALUE encoding="string">surface-coding</VALUE> </PARAMETER> <VALUE encoding="base64" size="160">YLYPzANM0VdACnDw3C+HyxD5IQQ=</VALUE> </DIGEST> <ALGORITHM>RSA PKCS#1-V1.5</ALGORITHM> <VALUE encoding="base64" size="1024">Gayk6Xg6M2+9Aq5sOggZQZex714msU/ONq4oMvCvpGZmsqi3kpTE0NKyKlp926vtUJXQorCdLl+usWEbunlagLZMjb368tLOBjTSAoAB7Y6TocW6JbacMvmPkkwFJHBLIrFfjWT5mCIDMbaY1oJv8W8LOAMHmFInUIZxvlfWFvc=</VALUE> </SIGNATURE> </XrML>