Once generated, the AD RMS cluster key is protected by a password-based encrypted key. You will be asked to set up a password ...

Once generated, the AD RMS cluster key is protected by a password-based encrypted key. You will be asked to set up a password to enable this encryption and must remember this password for disaster recovery. The cluster key will be automatically shared by AD RMS servers joining this cluster.