DRM Overview
Certificate Enrollment Guide
- About certificates
- Prerequisites
- About certificate enrollment roles
- Add Requesters
- Create a Secondary Administrator
- Request certificates
- Deploy certificates
- Store keys
- Renew certificates
Adobe Primetime DRM SDK 5.3.1
- Adobe Primetime DRM SDK - An overview
- About Adobe Primetime DRM
- Key features
- Terminology and core concepts
- Content distribution workflow
  - Content preparation
  - Content acquisition
- Adobe Primetime DRM components
- Deploy Adobe Primetime DRM
- Additional Deployment Scenarios
  - UltraViolet media and Adobe Primetime DRM
  - Adobe Primetime authentication and Adobe Primetime DRM
DRM Quick-Start Guide
- Getting Started
- Install Tomcat
- Set up and deploy the server for Protected Streaming
- Package encrypted content
- Install Flash Player and playback test content
- Play back a locally packaged video
- Next Steps
Adobe Primetime Cloud DRM Quick-Start Guide
- What is included with Primetime Cloud DRM
- What is NOT supported by Primetime Cloud DRM
- Prerequisites
- Packaging options
- Test the packaged content
- Triaging errors
- Custom authentication/entitlement
- Adobe Primetime authentication (Optional)
- Creating custom DRM policies (Optional)
- Update existing DRM content to use Cloud DRM (Optional)
- Streaming to Xbox360 (Optional)
Using the Adobe Primetime DRM Key Server
- Requirements for using Primetime DRM Key Server
- Deploy the Primetime DRM Key Server
- Packaging content
Adobe Primetime DRM Secure Deployment Guidelines
- Introduction to Network Topology
- Vendor-specific security information
- Physical security and access
- Packaging and protecting content
- Ensuring compatibility with Flash Media Rights Management Server 1.x
- Issue and protect the License Server
Multi-DRM Workflows
- Multi-DRM Workflows
- Primetime DRM Cloud Quick-start
- Workflows: Package, License, and Play
- Generic Workflows
  - Primetime Packager / Cloud DRM / TVSDK
  - ExpressPlay Packager / Cloud DRM / TVSDK
- Feature Topics
- ExpressPlay license token request / response reference
- Migrating from Access to Multi-DRM
- Glossary
Adobe Primetime DRM On Premises Individualization Server Guide
- Software Requirements
- Server configuration properties
- Monitoring
- Update the License Server WAR File
- Generate the On Premises DRM Metadata
- Client Integration
- Sample Client Requests
- FAQ
Primetime DRM Server for Protected Streaming 5.3.1
- About Adobe Primetime DRM Server for Protected Streaming
- About usage rules
- Requirements
- Understanding Deployment
Using the Adobe Primetime DRM SDK for Protecting Content - 5.3.1
- What is new in Adobe Primetime DRM
- Usage rules and Authentication
- Runtime and application restrictions
- Other DRM policy options
- Device Group Domain Registration
- Output protection controls
- Packaging Options
- Setting up the SDK
- Work with DRM policies
- Package media files
- Pre-generating and embedding licenses
  - Pre-generating licenses
  - Embedding licenses
- Implement a License Server
- Revoke client credentials
- Create video players
Resolution-Based Output Protection 5.3.1
- RBOP Overview
- RBOP Concepts
- RBOP Client Support
- Sample RBOP Configuration
- RBOP Grammar
- RBOP FAQ
Adobe Primetime DRM Reference Implementations 5.3.1
- About the reference implementations
- Typical workflow
- Command-line tools
  - Overview
  - Command-line tools requirements
  - Install the command-line tools
- Configure and run the command-line tools
  - Overview
  - About command-line tools configuration files
  - DRM Policy Manager
  - Policy Manager Command-line usage
  - Configuration properties
  - Non-SWF Application Allow listing
  - SWF Application Allow listing
- DRM Media Packager
- DRM Policy Update List Manager
- DRM Revocation List Manager
- DRM License Generator
- DRM License Embedder
- AIR Publisher ID utility
- License server
- Configuration
  - License server properties file
  - Prepare passwords for the Server properties files
  - Prepare passwords using Ant
  - Prepare passwords using Java
  - Remote key delivery properties (iOS)
  - Set up the license server database
  - Configure the license server database
  - HSM configuration
  - Cross-domain policy file
- Deploy the license server
- Troubleshooting
- Check whether the license server started properly
- Determining if Reference Implementation License Server runs properly
- Implementing the usage models
  - Implementing the usage models overview
  - Enable the usage model demo
  - Configure usage model demo mode
  - Update the reference implementation DB
  - Usage model demo business rules
- Domain registration
  - Overview
  - Implement identity-based domain registration
  - Identity-based domain registration logic
  - Implement anonymous domain registration
  - Anonymous domain logic
- Migrate from FMRMS 1.0 or 1.5 to Adobe Primetime DRM 2.0 or later
- Upgrade existing deployments
  - Upgrade existing deployments overview
  - Set up a domain server
Adobe Primetime TVSDK-DRM Workflow
- TVSDK-DRM client-side workflow overview
- Primetime DRM content protection options
- Primetime DRM on the client
- Primetime DRM license server
- License acquisition process overview
- License acquisition process details
- Pre-loading licenses for offline playback
- Using the DRMStatusEvent class
- Using the DRMAuthenticateEvent class
  - Create a DRMAuthenticateEvent handler
  - Create an authentication UI
- Using the DRMErrorEvent class
- Using the DRMManager class
- Using the DRMContentData class
- Out-of-band licenses
- Device domain support
- License preview
- Delivering content
DRM Client Error Message Reference
Using Adobe Access DRM With an External Key Management System
- Adobe Access DRM External CEK Overview
- Standard AAXS DRM Workflow
- AAXS DRM External CEK Workflow
- Using External CEK to Vend and Package Licenses
Use the Adobe Access Server for Protected Streaming
- About Adobe Access Server for Protected Streaming
- Usage rules
- Requirements
- Deploying the Adobe Access Server for Protected Streaming
- License server configuration files
- Crossdomain policy file
- Custom authorization extensions
- Performance tuning
  - Global Configuration File
- Upgrading the Adobe Access Server for Protected Streaming
- Updating configuration files
- Packaging content
- Adobe Access Server for Protected Streaming utilities
Adobe Access Secure Deployment Guidelines
- Introduction to Network Topology
- Vendor-specific security information
- Physical security and access
- Packaging and protecting content
- Protect and issue licenses
An Overview of Adobe Access SDK
- An overview of Adobe Access SDK
- About Adobe Access
- Key features
- Terminology and core concepts
- Content distribution workflow
  - Content preparation
  - Content acquisition
- Adobe Access components
- Deploy Adobe Access
- Additional Deployment Scenarios
  - UltraViolet media and Adobe Access
  - Adobe Pass and Adobe Access
Using the Adobe Access SDK for Protecting Content
- Introduction
- User authentication
- Time-based rules
- Runtime and application restrictions
- Other policy options
- Output protection controls
- Packaging Options
- Setting up the SDK
- Working with policies
- Packaging media files
- Pre-generating and embedding licenses
- Implementing the License Server
  - Implementing the License Server
  - License Server deployment options
- Processing Adobe Access requests
- Revoking client credentials
- Creating video players
Adobe Access Reference Implementations
- Overview - Using the reference implementations
- Command line tools for packaging content and creating revocations lists
- Policy Manager
- Media Packager
- Policy Update List Manager
- Revocation List Manager
- AIR Publisher ID utility
  - AIR Publisher ID utility overview
  - Command line usage
- License Generator
- License Embedder
  - License Embedder overview
  - Command line usage
- License server and watched folder packager
- Deploying the license server and watched folder packager
  - Deploying the license server and watched folder packager overview
  - Troubleshooting
- Determining if Reference Implementation License Server is running properly
- Implementing the usage models
- Implementing domain registration
- Migrating from FMRMS 1.0 or 1.5 to Adobe Access 2.0 and above
- Upgrading existing deployments
- Set up a domain server
- Flash Access Manager AIR application usage

Firewall rules

Incoming URLs

Configure your outer firewall so that it exposes only the URLs for application functionality that you want to provide to the end users. Allow external users access through the outer firewall only to the URLs listed in the following table:

Root URL	Purpose
/flashaccess/getServerVersion/v3	URL for determining the server version.
/flashaccess/authn/v1/* /flashaccess/authn/v3/* /flashaccess/authn/v4/* /flashaccess/authn/v5/*	URLs for user authentication. This URL must be accessible only if you use Adobe Access Client APIs to perform user authentication.
/flashaccess/license/v1/* /flashaccess/license/v3/* /flashaccess/license/v4/* /flashaccess/license/v5/*	URLs for issuing licenses to end users.
/flashaccess/sync/v3 /flashaccess/sync/v4 /flashaccess/sync/v5	URLs for synchronization requests. This URL must be accessible only if you specify the synchronization requirements in your licenses.
/flashaccess/domain/v3 /flashaccess/domain/v4 /flashaccess/domain/v5	URLs for domain registration. This URL must be accessible only if you implement domain support.
/flashaccess/dereg/v3 /flashaccess/dereg/v4 /flashaccess/dereg/v5	URLs for domain de-registration. This URL must be accessible only if you implement the domain support.
/flashaccess/headerconversion/v1/*	URLs for use by the client to convert FMRMS 1.x DRM metadata to Adobe Access DRM metadata. Note: This URL must use SSL (HTTPS).
/edcws/services/urn:EDCLicenseService/*	LiveCycle Rights Management ES web service URL. If content was published using an earlier version of FMRMS, this URL allows older clients to connect to the server and be prompted to upgrade to Adobe Access. Note: This URL must use SSL (HTTPS).
/flashaccess/lreturn/v5	URLs for license return. The URL must be accessible only if you implement license return support.

NOTE

The internal firewall must only allow connections to be made to the Adobe Access license server through the reverse proxy, and only to the URLs listed above. To improve scalability, the connections between the reverse proxy and Adobe Access will be over HTTP.