Discovery of the Subenrollment Service

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

The first server in a licensing-only cluster must submit a subenrollment request to the RMS root cluster. To do this, the first server in the licensing-only cluster obtains the URL of the root cluster subenrollment service, as follows.

During the provisioning of a server in a licensing-only cluster, RMS Setup queries Active Directory, and then detects the service connection point of the root cluster. RMS uses the URL that is stored in that service connection point to locate the root cluster, and then sends a request for a server licensor certificate from the subenrollment service of the root cluster.

To make a subenrollment service request, the licensing-only cluster first retrieves the URL to the Certification virtual directory of the root cluster, where the subenrollment service is located, from Active Directory. It then appends the path to the subenrollment service.

For example, the URL for the Certification virtual directory on the root cluster is stored in Active Directory in the following form:


When the first server in a licensing-only cluster requests the subenrollment service, it appends the service file that is name to the URL, as follows:



If you have enabled SSL on the RMS servers in the root cluster, these URLs will use the https:// connection protocol.