RMS Account Certification Service

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

The account certification service runs only on the root cluster. The account certification service creates rights account certificates, which associate user accounts with specific computers. A rights account certificate enables a user to publish or consume rights-protected content while using a specific computer.

The account certification service application file, Certification.asmx, is located in the Certification virtual directory that is in IIS.

The default access control list on this service is shown in the following table:

User or Group Default Permission


Full Control

RMS Service Group

Read and Execute


Full Control


Read and Execute