[The AD RMS SDK leveraging functionality exposed by the client in Msdrm.dll is available for use in Windows Server 2008, Windows Vista, Windows Server 2008 R2, Windows 7, Windows Server 2012, and Windows 8. It may be altered or unavailable in subsequent versions. Instead, use Active Directory Rights Management Services SDK 2.1, which leverages functionality exposed by the client in Msipc.dll.]

Genmanifest.exe is a command-line program that creates a manifest. The syntax is

genmanifest [-chain SignedChainPathAndFile] SourceMCFPath DestinationXMLPath


  • -chain SignedChainPathAndFile contains the path of the signed Pre-production or Production certificate. If you are using the Pre-production environment on Windows Server 2008, use the ISVTier5AppSignSDK_Client.xml file located in the SDKInstallPath\Bin folder. Before you can switch to the Production hierarchy, however, you must apply for a Production License Agreement and request a Production certificate from Microsoft. For more information, see Requesting a Production License Agreement.


    Although the syntax specifies that this argument is optional, it is in fact required for all practical purposes.


  • SourceMCFPath contains the path of the manifest configuration file. This file has a .mcf extension.

  • DestinationXMLPath contains the path of the generated XrML manifest file. Give the file a .xml extension.

The following example uses the Pre-production certificate and a manifest configuration file named MCF_in.mcf to create a signed XrML manifest in the Man_out.xml file.

c:\>genmanifest.exe -chain ISVTier5AppSignSDK_Client.xml MCF_in.mcf Man_out.xml

Create an Application Manifest

Manifest Configuration File Example

Manifest Configuration File Syntax