Share via

4.5.3 Client Licensor Certificate Example

The following is an example of a Client Licensor Certificate (CLC).

 <XrML xmlns="" version="1.2">
   <BODY type="LICENSE" version="3.0">
     <ISSUEDTIME>2010-06-11T20:52</ISSUEDTIME>
     <DESCRIPTOR>
       <OBJECT type="Client-Licensor-Certificate">
         <ID type="MS-GUID">{1c4a57b8-94cd-4174-b555-881d705ee5b5}</ID>
       </OBJECT>
     </DESCRIPTOR>
     <ISSUER>
       <OBJECT type="MS-DRM-Server">
         <ID type="MS-GUID">{96c4ca87-b3ff-4ded-9c15-53272e26396f}</ID>
         <NAME>CONTOSO-RMS</NAME>
         <ADDRESS type="URL">HTTP://rms:80/_wmcs</ADDRESS>
       </OBJECT>
       <PUBLICKEY>
         <ALGORITHM>RSA</ALGORITHM>
         <PARAMETER name="public-exponent">
           <VALUE encoding="integer32">65537</VALUE>
         </PARAMETER>
         <PARAMETER name="modulus">
           <VALUE encoding="base64" size="1024">q8uQpk4C1HSB3bbyBskYRn8o1bJbVWYVVb0CFtFdW7qlbNojWrIx8nE1YPGAmuzJLFiIxBK6vRNbeOC0WX3K4sAKRGbKEXRFPq5WQLFAXdzG5f71uohhInRrghCM6F1s9ww10Y3gQ3G4k6F/WktX8ttmfeKHzcrniCYMId0vvJg=</VALUE>
         </PARAMETER>
       </PUBLICKEY>
       <SECURITYLEVEL name="Server-Version" value="6.0.0.0" />
       <SECURITYLEVEL name="Server-SKU" value="RMS 2.0" />
     </ISSUER>
     <DISTRIBUTIONPOINT>
       <OBJECT type="License-Acquisition-URL">
         <ID type="MS-GUID">{0F45FD50-383B-43EE-90A4-ED013CD0CFE5}</ID>
         <NAME>DRM Server Cluster</NAME>
         <ADDRESS type="URL">http://rms/_wmcs/licensing</ADDRESS>
       </OBJECT>
     </DISTRIBUTIONPOINT>
     <DISTRIBUTIONPOINT>
       <OBJECT type="Extranet-License-Acquisition-URL">
         <ID type="MS-GUID">{94BF969A-CA04-44d6-AA96-51071281FEF2}</ID>
         <NAME>DRM Server Cluster</NAME>
         <ADDRESS type="URL">http://rms.contoso.com/_wmcs/licensing</ADDRESS>
       </OBJECT>
     </DISTRIBUTIONPOINT>
     <ISSUEDPRINCIPALS>
       <PRINCIPAL internal-id="1">
         <OBJECT type="Group-Identity">
           <ID type="Windows">S-1-5-21-3270430776-546919264-923996561-1118</ID>
           <NAME>owner@contoso.com</NAME>
         </OBJECT>
         <PUBLICKEY>
           <ALGORITHM>RSA</ALGORITHM>
           <PARAMETER name="public-exponent">
             <VALUE encoding="integer32">65537</VALUE>
           </PARAMETER>
           <PARAMETER name="modulus">
             <VALUE encoding="base64" size="1024">O5bWmHBkyBvEEWvENoqVkma20zURn0kXR87VIaNwnnBZCZpRIBrnBx8cvMhOIv6SEu0ei2ZCat9y6/6atYbfkRVhcFJqZFz/JVlKD3O/zyS4FZV6SQvrxdl+NDi/O5mYLGPs+yRBONi7XTvH7H1r/8Go/eZTZ6lSM+ZgUXBFts8=</VALUE>
           </PARAMETER>
         </PUBLICKEY>
       </PRINCIPAL>
     </ISSUEDPRINCIPALS>
     <WORK>
       <OBJECT type="Client-Licensor-Certificate">
         <ID type="MS-GUID">{1c4a57b8-94cd-4174-b555-881d705ee5b5}</ID>
       </OBJECT>
       <RIGHTSGROUP name="Main-Rights">
         <RIGHTSLIST>
           <RIGHT name="ISSUE">
             <CONDITIONLIST>
               <TIME>
                 <RANGETIME>
                   <FROM>2010-06-10T20:50</FROM>
                   <UNTIL>2011-06-11T20:50</UNTIL>
                 </RANGETIME>
               </TIME>
               <ACCESS>
                 <PRINCIPAL internal-id="1">
                   <ENABLINGBITS type="sealed-key">
                     <VALUE encoding="base64" size="6144">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</VALUE>
                   </ENABLINGBITS>
                 </PRINCIPAL>
               </ACCESS>
             </CONDITIONLIST>
           </RIGHT>
         </RIGHTSLIST>
       </RIGHTSGROUP>
     </WORK>
   </BODY>
   <SIGNATURE>
     <DIGEST>
       <ALGORITHM>SHA1</ALGORITHM>
       <PARAMETER name="codingtype">
         <VALUE encoding="string">surface-coding</VALUE>
       </PARAMETER>
       <VALUE encoding="base64" size="160">YLYPzANM0VdACnDw3C+HyxD5IQQ=</VALUE>
     </DIGEST>
     <ALGORITHM>RSA PKCS#1-V1.5</ALGORITHM>
     <VALUE encoding="base64" size="1024">Gayk6Xg6M2+9Aq5sOggZQZex714msU/ONq4oMvCvpGZmsqi3kpTE0NKyKlp926vtUJXQorCdLl+usWEbunlagLZMjb368tLOBjTSAoAB7Y6TocW6JbacMvmPkkwFJHBLIrFfjWT5mCIDMbaY1oJv8W8LOAMHmFInUIZxvlfWFvc=</VALUE>
   </SIGNATURE>
 </XrML>