# RMS Task Parameters

CFS has import tasks to encrypt and decrypt files using Microsoft Azure Rights Management (RMS).

## Decrypt Files

To decrypt files that have been encrypted with RMS, use the `RMSDecrypt` task.

CFS can decrypt any encrypted Office file or `.pfile`, but cannot decrypt encrypted PDF files.

You must run this task as a Pre task, so that the files are decrypted before KeyView is used to filter them. When you configure the task, use the `Pre` parameter to specify the name of a section in the CFS configuration file that contains the task settings:

    [ImportTasks]
    Pre0=RmsDecrypt:RmsSettings

    [RmsSettings]
    RmsTenantId=...
    RmsClientId=...
    RmsClientSecret=...

After decrypting a file, CFS adds the document field `RmsDecryptedFile` with the value `true`.

## Encrypt Files

To encrypt files using RMS, use the `RmsEncrypt` task.

Office documents keep their original extension, and other file formats are encrypted as a pfile with a `.pfile` extension.

    [ImportTasks]
    Post0=RmsEncrypt:RmsSettings

    [RmsSettings]
    RmsTenantId=...
    RmsClientId=...
    RmsClientSecret=...

After encrypting a file, CFS adds the document field `RmsEncryptedFile` with the value `true`.

_FT_HTML5_bannerTitle.htm