Product
Active Directory Rights Management Services (AD RMS) utilizes a non-rotatable Server Licensor Certificate master key that, if compromised, allows for the indefinite offline decryption of all protected corporate data.