azure-information-protection git:20260304.c062aa8A

Immutable. This exact content is served forever at /api/v1/blob/cb20ed31d9e891f8.

---
name: azure-information-protection
description: Expert knowledge for Azure Information Protection development including best practices, decision making, configuration, and deployment. Use when building, debugging, or optimizing Azure Information Protection applications. Not for Azure Key Vault (use azure-key-vault), Azure Security (use azure-security), Azure Defender For Cloud (use azure-defender-for-cloud), Azure Role-based access control (use azure-rbac).
compatibility: Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata:
  generated_at: "2026-02-28"
  generator: "docs2skills/1.0.0"
---
# Azure Information Protection Skill

This skill provides expert guidance for Azure Information Protection. Covers best practices, decision making, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

## How to Use This Skill

> **IMPORTANT for Agent**: This file may be large. Use the **Category Index** below to locate relevant sections, then use `read_file` with specific line ranges (e.g., `L136-L144`) to read the sections needed for the user's question

> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)

This skill requires **network access** to fetch documentation content:
- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.
- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.

## Category Index

| Category | Lines | Description |
|----------|-------|-------------|
| Best Practices | L32-L36 | Monitoring and troubleshooting Azure RMS connector health, tracking Azure Rights Management usage, and interpreting logs/metrics for ongoing protection service reliability. |
| Decision Making | L37-L41 | Guidance on choosing between Azure Rights Management and on-premises AD RMS, including feature, deployment, security, and migration considerations. |
| Configuration | L42-L47 | Configuring and deploying the Windows RMS (MSIPC) client and setting required registry values for RMS connectors on servers for Azure Information Protection. |
| Deployment | L48-L62 | Deploying the RMS connector and step-by-step guidance for migrating on-prem AD RMS (keys and policies) to Azure Information Protection, including HSM and software key migration. |

### Best Practices
| Topic | URL |
|-------|-----|
| Monitor RMS connector health and Azure RMS usage | https://learn.microsoft.com/en-us/azure/information-protection/monitor-rms-connector |

### Decision Making
| Topic | URL |
|-------|-----|
| Decide between Azure Rights Management and AD RMS | https://learn.microsoft.com/en-us/azure/information-protection/compare-on-premise |

### Configuration
| Topic | URL |
|-------|-----|
| Configure and deploy the RMS client (MSIPC) on Windows | https://learn.microsoft.com/en-us/azure/information-protection/rms-client/client-deployment-notes |
| Configure RMS connector registry settings on servers | https://learn.microsoft.com/en-us/azure/information-protection/rms-connector-registry-settings |

### Deployment
| Topic | URL |
|-------|-----|
| Configure on-premises servers to use the RMS connector | https://learn.microsoft.com/en-us/azure/information-protection/configure-servers-rms-connector |
| Deploy Microsoft Rights Management connector for on-premises servers | https://learn.microsoft.com/en-us/azure/information-protection/deploy-rms-connector |
| Install and configure the RMS connector for AIP | https://learn.microsoft.com/en-us/azure/information-protection/install-configure-rms-connector |
| Prepare environment for Phase 1 AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase1 |
| Execute Phase 2 of AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase2 |
| Complete Phase 3 of AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase3 |
| Run Phase 4 tasks for AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase4 |
| Finalize Phase 5 of AD RMS to AIP migration | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-phase5 |
| Migrate AD RMS deployments to Azure Information Protection | https://learn.microsoft.com/en-us/azure/information-protection/migrate-from-ad-rms-to-azure-rms |
| Migrate HSM-protected AD RMS key to AIP HSM key | https://learn.microsoft.com/en-us/azure/information-protection/migrate-hsmkey-to-hsmkey |
| Migrate software-protected AD RMS key to AIP HSM key | https://learn.microsoft.com/en-us/azure/information-protection/migrate-softwarekey-to-hsmkey |
| Migrate software-protected AD RMS key to AIP software key | https://learn.microsoft.com/en-us/azure/information-protection/migrate-softwarekey-to-softwarekey |