What are Sensitivity Labels?
Sensitivity labels are used to classify email messages, documents, sites, and more. When a label is applied (automatically or by the user), the content or site is protected based on the settings you choose. For example, you can create labels that encrypt files, add content marking, and control user access to specific sites.
Once we created the label policies we started to do some testing and noticed the following bounce message when we applied labels to emails:
Remote Server returned ‘550-5.7.162 OmeEncryptionAgent; Permanent Failure 550-5.7.162 Exception encountered: RmException. 550-5.7.162 Exception message: Failed to get template. Template:96be504d-7520-4645-8f23-06d0b61f9235. FailureCode:UnknownFailure. Recoverable:False.. 550 5.7.162 Please contact your system administrator for more information.’
After some research we identified that the labels had not been published as below:
The issue is caused by because the has not been a syncronisation between the Lables and Azure RMS. The following is a guide to forcing a syncronisation using PowerShell connecting to the AIP service:
1, Run the following command to install powershell module for the AIP Service:
2, Run the following command to enable the AIP service module:
3, Run the following command to connect to the AIP Service
We then need to list all of the labels to see what the status is as below:
Get-AipServiceTemplate | FL name*, TemplateId , Status
All of the labels highlighted above as Archived have not yet sync’d to the Azure RMS service so the next command will force the label to sync, this will need to be done on each individual label as follows:
Set-AipServiceTemplateProperty -TemplateID "TemplateID" -Status Published
So an example below
Once you have ran the command you will notice that all label status’s will change to Published – we found that once the above process hads been completed the label can be applied and emailed successfully.