Event ID - 5133

Event Id5133
SourceWindows SharePoint Services 3
DescriptionInformation Rights Management (IRM): There was a problem while obtaining a Rights Management Services (RMS) group identity certificate (GIC).

A GIC is an essential credential that allows a user to read/view rights protected documents.

Additional Data

Error value: %1
Event Information According to Microsoft :

Cause :

This event is logged when there was a problem while obtaining a Rights Management Services (RMS) group identity certificate (GIC).

Resolution :

Configure RMS server to accept requests

An RMS server refused access to a computer running Windows SharePoint Services 3.0. This alert indicates that a front-end Web server contacted the RMS server but the RMS server denied access to the Web server. Generally, this error occurs when an administrator is first enabling IRM for the Web farm in Central Administration. If this is the case, IRM cannot be enabled in Central Administration, and list administrators will not be able to enable IRM on a document library or list until the error is resolved. If this error occurs after IRM is enabled, downloads from a rights-protected list or library will fail until the error is resolved.

To resolve this issue, the RMS server must be configured to accept requests from the server running Windows SharePoint Services 3.0 that caused this error. The RMS server settings that are required differ depending on whether:
a)You want the RMS server to accept requests from all computers on the domain, and Windows SharePoint Services 3.0 is installed as a single server on the same domain as your RMS server.

b)You do not want the RMS server to accept requests from all servers on the domain, and Windows SharePoint Services 3.0 is installed as a single server (recommended).

c)Windows SharePoint Services 3.0 is installed in a Web farm configuration.

SharePoint administrators can discover the correct FQDN, NetBIOS name or service account name to configure on the RMS server by attempting to authenticate against the RMS server:

To discover the correct service account name
  1. In Central Administration, on the left navigation pane, click Operations .
  2. On the Operations page, in the Security Configuration section, click Information Rights Management .
  3. On the Information Rights Management page, click either Use the default RMS server specified in Active directory or Use this RMS server , and then type the URL for the RMS server you want to use.
  4. Click OK .

You must be an administrator on the RMS server to make these changes.

To configure the RMS server to accept requests from all servers in the domain
  1. On the RMS server, navigate to the folder containing the ServerCertification.asmx file. This file is typically located in the %systemdrive%\Inetpub\wwwroot\_wmcs\Certification folder.
  2. Add the computer account of the Windows SharePoint Services 3.0 Server to the access control list (ACL) of the ServerCertification.asmx file and assign it the Read & Execute permission.
To configure the RMS server to accept requests from Windows SharePoint Services installed as a single server
  • On the RMS server, navigate to the folder containing the ServerCertification.asmx file. This file is typically located in the
    %systemdrive%\Inetpub\wwwroot\_wmcs\Certification folder.
  • Add the FQDN or NetBIOS name of the server that cannot access the RMS server to the ACL of the ServerCertification.asmx file, and assign it the Read & Execute permission.
    To configure the RMS server to accept requests from Windows SharePoint Services 3.0 installed in a farm
    1. On the RMS server, navigate to the folder containing the ServerCertification.asmx file. This file is typically located in the
      %systemdrive%\Inetpub\wwwroot\_wmcs\Certification folder.
    2. Add each service account assigned to an application pool for the Web application on the server that cannot access the RMS server to the ACL of the ServerCertification.asmx file, and assign it the Read & Execute permission.

    If the front-end Web server has not been configured on the RMS server, an error message appears that states that the computer running Windows SharePoint Services 3.0 could not authenticate against the RMS server. In this error message, the FQDN or NetBIOS name of the server or the service account that you must register with the RMS server will appear.

    Verify :

    To verify that this problem is resolved, users should download and then re-upload a file from a rights-managed document library. If successful, then the problem is resolved.
Reference LinksEvent ID 5133 from Source Windows SharePoint Services 3

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh