Obtain the Azure IP authentication information for the Docs service
Azure
IP authentication information for the Docs
serviceThe
Docs
service authenticates to Azure
-IP using a fixed symmetric key and is associated with a super user service principal and a BPOS tenant ID that are generated using Windows PowerShell
. The values are used to configure the BEMS
dashboard. Authenticating to Azure
-IP allows the Docs
service to decrypt protected documents and determine the rights a user has on a document.On the computer that you use to complete this task, make sure that the following software is installed:
- Windows PowerShell3.0 or later.
- Windows PowerShellGet (previously known as OneGet). For more information about downloading PowerShellGet, visit https://www.microsoft.com/en-us/download/details.aspx?id=51451.
- Microsoft NuGet. For more information about NuGet, visit https://docs.microsoft.com/en-us/nuget/.To install NuGet, inWindows PowerShelltypeInstall-PackageProvider -Name NuGet -MinimumVersion <. Where <version number> -Forceversion number> is a minimum of 2.8.5.201.
- AADRM (AzureAD Rights Management). For more information about AADRM, visit https://docs.microsoft.com/en-us/azure/information-protection/install-powershellTo install AADRM, inWindows PowerShell, typeInstall-Module -Name AADRM.
- AzureActive Directory(MSOnline). For more information about MSOnline, visit https://docs.microsoft.com/en-us/powershell/module/msonline/?view=azureadps-1.0.To install MSOnline, inWindows PowerShell, typeInstall-Module MSOnline.
For more information about the following commands, visit https://docs.microsoft.com/en-us/azure/information-protection/rms-client/client-admin-guide-powershell.
- Open theWindows PowerShell(run as administrator) and complete the following instructions.
- Connect to theAzureAD with an account that has tenant administrator permissions. TypeConnect-MsolService. PressEnter.
- Create a new service principal. TypeNew-MsolServicePrincipal. Add a display name for the service principal (for example, BEMSDocsAzureIPServicePrincipal). PressEnter.
- Connect toAzureIP with an account that has tenant administrator permissions. TypeConnect-AadrmService. PressEnter.
- Disconnect fromAzureIP. TypeDisconnect-AadrmService. PressEnter.