adrms error: broken certificate chain

See more:

Windows

Win2008-R2

I tried to develop an adrms application by using the adrms sdk.

First of all, I set up the lab. environment referring to msdn "adrms step-by-step guide".
I have got the word works fine with the ad rms under production mode.
Then I switched the environment to pre-production, now I can get my
machine activated and the user activing works fine as well.
But when it comes to DRMInitEnvironment the broken chain error come up and I do not know what to do.

As I know, the pre-production certificate is provided with the sdk and all I need to do is generate it throght the genmenifest.exe procedure.And I also noticed that the DRMInitEnvironment function takes two certificates: the machine certificate and the manifest file. The machine cerfiticate is generated by the rms server but the server license is issued with a self-signed certificate when the ad rms role is added. So I guess that the route certificate for the machine certificate adn the manifest will not lead to the same root CA certificate. However that is just a guess and I do not know how to conform it.

BTW, every time I run my own program I got the certificate warning saying that the certificate is not trusted when it gets to the user activating part.

If you can give me any kind of help I would appreciate it very much.

Thanks in advance,

Jordan.