Migration of AD RMS to Azure Information Protection

Question

Greetings,

We exported an AD RMS key and then import it to Azure Information Protection. We have also ran the Prepare-Client.cmd file in the AD RMS server to point the registry keys to AIP. All steps were successful and we validated that the imported key in AIP is archived. But we still could not open the files that are migrated from SharePoint 2010 to SharePoint online that were previously protected by AD RMS. Is there anything we are missing? Thank you.

Answer 1

@Premanan Rathakrishnan

Welcome to the Microsoft Q&A and thank you for posting your questions here

It looks like you’ve done a lot of the necessary steps for migrating from AD RMS to Azure Information Protection.

However, there are a few additional things you might want to check:

1. Client Configuration: Ensure that all client machines have been properly configured to use Azure Information Protection instead of AD RMS. This includes verifying that the registry settings are correctly pointing to the Azure RMS service.
2. Service Discovery: Make sure that the service discovery process is correctly configured. The order for service discovery should be registry, then service connection point (SCP), then cloud.
3. Onboarding Controls: Use onboarding controls to manage the transition period where some users might still be using AD RMS while others have moved to Azure Information Protection.
4. Content Re-protection: In some cases, you might need to re-protect the content that was previously protected by AD RMS to ensure it can be accessed using Azure Information Protection.
5. Permissions and Access: Verify that the permissions and access rights have been correctly migrated and that users have the necessary rights to open the protected files.

Is there a specific error message you’re encountering when trying to open the files? That might provide more clues on what could be going wrong.