AD RMS Certificate Hierarchy undetermined

Hello,

I'm getting the error I've pasted below after installation of AD RMS. I'm in a domain environment: mailtask.com. The service user for RMS has the appropriate rights. I also have AD Certificate Services installed. Furthermore, the AD RMS server has the appropriate certificate in the Trusted Root Certification Authorities Store.

I don't have an option to change the SCP because I can't add the RMS cluster.

Anyone know what's causing this? All help is greatly appreciated.

This is the error:

Active Directory Rights Management Services: Installation succeeded with errors
   Error: Attempt to configure Active Directory Rights Management Server failed.  The AD RMS installation could not determine the certificate hierarchy. If the AD RMS service connection point (SCP) you need to use is registered in Active Directory but is not valid, revise it to make it valid, or create a new SCP, and install AD RMS again.    at Microsoft.RightsManagementServices.Configuration.LicensingServerSelfEnrollment.DecideCertificateHierarchy()
   at Microsoft.RightsManagementServices.Configuration.CertificationServerSelfEnrollment.Enroll(EnrolleeServerInformation enrolleeInformation, EnrolleeRevocationInformation revocationInformation, String certificateDisplayName, String cspName, String keyContainerName)
   at Microsoft.RightsManagementServices.Configuration.ProvisioningBase.Enroll()
   at Microsoft.RightsManagementServices.Configuration.ProvisioningBase.Run()
   at Microsoft.RightsManagementServices.Configuration.ProvisionerBase.DoProvision()
   at Microsoft.RightsManagementServices.Configuration.ProvisionerHelper.Run(OperationType operationType, Object data)
   at Microsoft.RightsManagementServices.Configuration.CmdLineHandler.Run()
Remove and re-install AD RMS to attempt provisioning again.
   Warning: Before you can administer AD RMS on this server, you must log off and log on again.
   The following role services were installed:
   Active Directory Rights Management Server