Load Balancing Microsoft Rights Management Service (RMS)

0

Configuration has yet to be fully verified, Kemp Support will gladly assist if your RMS traffic is not flowing as expected.

 

1   Introduction

RMS Active Directory Rights Management Services (AD RMS) is a Microsoft Windows security tool that provides persistent data protection by enforcing data access policies. For documents to be protected with AD RMS, the application the document is associated with must be RMS-aware

 

1.1  Document Purpose

This section details a configuration for a specific application that has been provided by a customer but has yet to be fully tested

This specific configuration will ensure that your RMS servers are highly-available, scalable, and secure.

Configuration has yet to be fully verified, Kemp Support will gladly assist if your RMS traffic is not flowing as expected.

 

2  Configuration 

 

2.1  Global Configuration

       No Changes Required

 

  2.2  Virtual Service Configuration

 One virtual Service is required that will listen on port 443. If required, a Port 80 Redirector can also be configured.

 

Port 80 Redirect

When 443 Virtual Service is created, navigate to Modify VS --> Advanced Properties --> Add a Port 80 Redirector VS

   

 

2.3   Create VS

 > New Virtual Service

 > Enter IP Address

 > Port = 443

 > Name = RMS

 > Add New Virtual Service

 

 

2.4    Standard Options   

 >  Persistence = Super HTTP (You will need to enable "SSL Acceleration" in SSL Properties in section  2.5) 

 >  Timeout =  1 Hours

 > Scheduling Method = Least Connection

 

 

2.5   Enable SSL Acceleration  & Tick Reencrypt

  >  Assign Certificate

 

2.6    Real Servers

    > Checker Parameter Type =  TCP

    > Checked Port = 443

    >  Add New

 

   > Enter Real Server IP Address

   > Port = 443

   > Forwarding Method = NAT

 


If you have successfully Load Balanced your MS RMS by implementing this specific configuration, please give a thumbs up or please leave a comment on a possible alteration that was required to make it function. Thank you

0 comments