Creating an Issuance License Report

Updated: October 22, 2009

Applies To: Windows Server 2008 R2, Windows Server 2008 R2 with SP1

An issuance license report unencrypts the user rights policy in an issuance license and returns it in eXtensible rights Markup Language (XrML) format. You can create a certificate chain report to obtain the certificate ID required for this procedure. For more information, see Creating a Certificate Chain Report.


By default, Active Directory Rights Management Services (AD RMS) does not log the issuance license policy required to produce this report. To configure the cluster to log this information, set the LoggingLevel value to 1 in the following registry key, and then restart the AD RMS Logging Service:

Membership in the local AD RMS Enterprise Administrators, or equivalent, is the minimum required to complete this procedure.

To create an issuance license report

  • At the Windows PowerShell command prompt, type:

    Get-RmsEncryptedIL -Path <drive>:\Report -ILCertificateID <IL_ID>

    where <drive> is the name of the Windows PowerShell drive, and <IL_ID> is the ID of the issuance license for which you want to create the issuance license report.

See Also


Using Windows PowerShell to Administer AD RMS
Understanding the AD RMS Administration Provider Namespace
AD RMS Administration Cmdlets
Working with Reports