KMS Types

Name

Name of the KMS.

Type

Type of KMS (Simulcrypt).

Network

Select the network from the list; the selected Nic will be used to pull the Keys from the KMS system.

Name

Name of the KMS.

Type

Type of KMS (Huawei PlayReady).

Port

Port number.

Network

Select the network from the list; the selected Nic will be used to pull the Keys from the KMS system.

Certificate

Certificate for negotiating with the KMS.

Private Key

Private Key for negotiating with the KMS.

Name

Name of the KMS.

Type

Type of KMS (Verimatrix, VMX).

Network

Select the network from the list; the selected Nic will be used to pull the Keys from the KMS system.

Key Server Manifest URL

The Manifest URL from which to retrieve the Manifest files.

Replace URL

The URL to replace within the Manifest files.

Name

Name of the KMS.

Type

Type of KMS (Verimatrix, MultiRights).

Network

Select the network from the list; the selected Nic will be used to pull the Keys from the KMS system.

Server URL

The Server URL to connect to.

Token

The Token to use for the connection to the server.

Name

Name of the KMS.

Type

Type of KMS (SKY, CKS).

Network

Select the network from the list; the selected Nic will be used to pull the Keys from the KMS system.

Server URL

The Server URL to connect to (Please follow the suggested URL structure).

Username

Username to access the KMS.

Password

The password to access the KMS.

Asset IDs

Asset IDs to be replaced in the URL.

Download repetition Rate

The repetition Rate field indicates the period of time that will be used by the system to re-inquire for the Keys.

Click on the toggle switch to disable the Download repetition Rate.

Name

Name of the KMS.

Type

Type of KMS (Irdeto).

Network

Select the network from the list; the selected Nic will be used to pull the Keys from the KMS system.

Server URL

The Server URL to connect to.

Token Request URL

Token URL to use when negotiating a connection.

Grant Type

A URL that is used to send the request to the KMS system.

Username

Username to access the KMS.

Password

The password to access the KMS.

Audience

Audience URL to use when sending the request to the KMS system.

Client ID

Client ID to use when sending the request to the KMS system.

Realm

Realm ID to use when sending the request to the KMS system.

The Server URL, in the format of: https://<server>:<port>/<directory> path to the authentication server.

For example, https://test_server.com:4443/ovrm/ovrr/

The repetition Rate field indicates the period of time that will be used by the system to re-inquire for the Keys.

Click on the toggle switch to disable the Download repetition Rate.

This is an autogenerated configuration by MCM, hence, please keep this field empty.

When creating a new “BISS2-CA KMS”, the MCM generates a public/private key pair. The public key should be copied and sent to the sender. (The private key is not visible on the GUI/API - can not be read. it is exported to the XML - but encrypted. This keeps it over a software upgrade)

On the channel config, it should be detected during the scan as “BISS-2” and the relevant KMS should be configured to the channel.

This is an autogenerated configuration by MCM, hence, please keep this field empty.

When creating a new “BISS2-CA KMS”, the MCM generates a public/private key pair. The public key should be copied and sent to the sender. 

BISS-2-E:

When creating a new “BISS KMS” - paste the static SK (session key) - 32 char long hex value.

BISS-2-1:

Paste the 16 char constant key to the channel configuration key field.

The Server URL provided by SynMedia, in the format of: https://synmedia_url/cpix/v2/configAlias/${asset_id} path to the authentication server.

Asset IDs to be replaced in the URL.

For HLS source, add the asset ID (if it’s more then 1 separate them with comma).

For MPEG-Dash source, asset ID is not required. 

The repetition Rate field indicates the period of time that will be used by the system to re-inquire for the Keys.

Click on the toggle switch to disable the Download repetition Rate.

Widevine Protection Info URL in the format: https://key-server-management.axtest.net/api/WidevineProtectionInfo

The repetition Rate field indicates the period of time that will be used by the system to re-inquire for the Keys.

Click on the toggle switch to disable the Download repetition Rate.

Configure a static KMS with the format <keyid>=<key>:<iv>,<keyid>=<key>:<iv>. Can add more than one entry by using “,” or “;”

For example, 221bd4b8e8413a18a6663f1dad126d86=726f1f4a7cc6420dee6e8db7314e64c8:510ac1a9694f0e63c92bd851147aaf3f

Select the network from the list; the selected Nic will be used to pull the Keys from the KMS system.

The Server URL provided by Kaltura in the format: <configured_url>?custom_data=<base64query>&signature=<base64Signature>

For example, https://udrmv3.kaltura.com/cenc/widevine/encryption

The private key is the key used for the signature in base64. 

For example, MahHgAP2AUbXGF32TXJVPOHCMtPTIyKh1xXLL5AWfRA=

Asset Ids are the content ids / asset ids for the key pulling (can be defined with the channel).

For example, CNN_1082

This is the Kaltura query request. The default one is:

{"ca_system":"OTT","account_id":"2657661","content_id":"${asset_id}","files":"","policy":null}

If “account_id=….” is defined, we replace it in the query. For example, account_id : 2657661

Also the whole query can be set in this field instead.

The repetition Rate field indicates the period of time that will be used by the system to re-inquire for the Keys.

Click on the toggle switch to disable the Download repetition Rate.