CREATE USER WITH ‘RIGHTS MANAGEMENT USER’ ROLE
Using the LiveCycle AdminUI, create a local user with the role “LiveCycle Rights Management User”
ENSURE HTTPS ACCESS TO THE RIGHTS MANAGEMENT WEBUI
Please note that the ‘Administrator’ user cannot login to Rights Management by default.
If the server is using a self-signed certificate, import the certificate to the local Windows certificate store. If this is not done, Acrobat will throw this error:
“Unable to connect to the service. SSL protocol error. Certificate is either invalid or common name or authority are not recognized.”
Launch your browser. Point it to the SSL over HTTP URL of the server such as follows:
https://lces2.adobe.com:9443/edc/Login.do
In IE8, you will get a message that says “There is a problem with this website’s security certificate.”
1) Click “Continue to this website (not recommended).”
2) At the top, to the right of the URL field, there shoul be a button that now says “Certificate Error”.
3) Click it. Then click the link “View Certificates”.
4) Click the button ‘Install Certificate”
5) Let the wizard guide you through the install. Choose “Automatically select the certificate store based on the type of certificate”.
6) If everything went fine, you should get a message that says “The import was successful”.
7) Click OK
8) Load the same URL again (https://lces2.adobe.com:9443/edc/Login.do). This time you should not get a certificate error. Instead, the Rights Management login page should load.
In Windows Vista, instead of letting IE choose the certificate store based on the type of certificate, choose the radiobutton ‘Place all certificates in the following store’, click ‘Browse’ and then choose ‘Trusted Root Certification Authorities‘.
For Firefox, you choose the link “Add an exception”. Click ‘Get Certificate” and then “Confirm Security Exception”.
CONFIGURE ADOBE READER OR ADOBE ACROBAT
- Choose the menu option Advanced->Security Settings
- Highlight “Adobe LiveCycle Rights Management Servers” and click ‘New’
- Put something useful in the name field such as “Test Adobe RM”.
The Server Name should be the fully resolvable DNS name of your server, or that of the Reverse Proxy.
- Change port from 443 to the SSL port of the appserver instance that hosts LiveCycle. This can also be the port on which SSL is configured for the Reverse Proxy (usually 443). In our example, it is 9443.
- Click “Connect to this Server”
CONFIGURE BASE URL FOR POLICIES
Login to the LiveCycle AdminUI. Navigate to Services->LiveCycle Rights Management->Configuration->Server Configuration. Change the ‘Base URL’ to a valid URL such as https://lces2.adobe.com:9443. This URL is a CRITICAL part configuration. If this URL becomes invalid at a later time due to domain registration expiry, corporate acquisitions, server certificate expiry etc, all of the documents published up to that point with this URL will be become totally useless.
Cheers,
Vipin
