Setting the Microsoft Federation Gateway RAC Validity Period

Applies To: Windows Server 2008 R2, Windows Server 2008 R2 with SP1

You can configure how long the Microsoft Federation Gateway rights account certificate (RAC) remains valid.

Membership in the local AD RMS Enterprise Administrators, or equivalent, is the minimum required to complete this procedure.

To set the Microsoft Federation Gateway RAC validity period

• At the Windows PowerShell command prompt, type:

  Set-ItemProperty -Path <drive>:\TrustPolicy\MicrosoftFederationGateway -Name CertificateValidityPeriodInDays <days>

  where <drive> is the name of the Windows PowerShell drive, and <days> is an integer specifying the number of days the Microsoft Federation Gateway RAC remains valid.

See Also

Concepts

Using Windows PowerShell to Administer AD RMS
Understanding the AD RMS Administration Provider Namespace
Configuring Microsoft Federation Gateway Support

Other Resources

Understanding AD RMS Trust Policies
Understanding the Microsoft Federation Gateway