-n policyname

-keyServer boolean

• If true, an HTTPS Key Server is required for key delivery to iOS.
• If not specified, the default is false.

-enforceJailbreak boolean

-critical boolean

• If true, the server must understand all parts of the DRM policy, which represents default behavior.
• If false, the server can ignore DRM policy attributes that it does not recognize.

Note: Both PEM or DER formats are supported.

-rootKey root-key

Specifies the root encryption key for the Enhanced License Chaining. If no key is specified and Enhanced License Chaining is enabled, a random key is automatically generated.

The key must be 16 bytes long and specified as hex values. Whitespace between the hex values is optional. For updates, the command-line option is not available, and the property is ignored.

-domainURL url

-domainAnon

Note: This option cannot be used with -domainAuthNS.

-domainAuthNS namespace

The authentication namespace for domain registration. If specified, the client needs to authenticate with a user name and password that were issued by the specified authority.

For updates, the command-line option is not available, and the property is ignored.

Note: This option cannot be used with -domainAnon.

-opAnalog AnalogOption

• NO_PROTECTION
• USE_IF_AVAILABLE
• USE_IF_AVAILABLE_ACP
• USE_IF_AVAILABLE_CGMSA
• REQUIRED
• REQUIRED_ACP
• REQUIRED_CGMSA
• NO_PLAYBACK

-drmBlacklist name/value-pairs

DRM clients that are restricted from accessing protected content. This option specifies a list of versions of DRM modules that may not be used (block list).

The value consists of comma separated name=value pairs in the following format:

os|release|arch|model|vendor|env|screen=value

Additional name/value pairs must be comma-separated. For example, os=Win,release=2.0,arch=32.

-runtimeBlacklsit name/value-pairs

Application runtimes are restricted from accessing protected content. This option specifies a list of versions of runtime modules that may not be used (block list).

The value consists of comma-separated name=value pairs in the following format:

os|release|application|arch|model|vendor|env|screen=value

Additional name/value pairs must be comma-separated. For example, os=Win,application=AIR.

-devCapabilitiesV1 name/value-pairs

Specifies the device capabilities that are required to access protected content. The value consists of comma separated name=value pairs in the following format:

nonUserAccessibleBus|hardwareRootOfTrust=true|false

For example, nonUserAccessibleBus=false,hardwareRootOfTrust=true.

During an update, you need to apply -devCapabilitiesV1 without the remaining arguments that remove the device capabilities restriction.

-sync name/value-pairs

Specifies how often clients are required to send synchronization messages to the server.

If the property is not set, clients will not send synchronization messages when they play content that is protected with a DRM policy. The value consists of comma-separated name=value pairs in the following format:

start|force=numberValue

The following list provides additional information about the options:

• (required) start specifies that the client needs to start synchronizing with the server in the specified minutes since the last synchronization.
• (optional) force is the probability (0-100) with which the client needs to force a synchronization message during playback.

For more information, see Enhanced License Chaining.

• yyyy-mm-dd

  For example, 2009-01-31 means January 31 at 12:00 AM.

• yyyy-mm-dd-h24:min:sec

  For example, 2009-01-31-14:30:00 means January 31 at 2:30 PM.

The date before content becomes invalid.

Note: You cannot specify policy.expiration.endDate and policy.expiration.duration concurrently.

For example, 2009-01-31-14:30:00 means that the content will expire on January 31 at 2:30 PM.

The time in minutes when the content becomes invalid. The time starts when you package content.

Note: You cannot specify policy.expiration.endDate and policy.expiration.duration concurrently.

The time in minutes when a license can be cached on the client. You can set this property to 0 to prevent license caching. The value must be 0 or higher.

Note: You cannot specify policy.licenseCaching.duration and policy.licenseCaching.endDate concurrently.

This DRM policy setting is applied only to the license caching on the disk and does not control memory-cached license duration. The license can be cached in memory even if you do not specify a DRM policy with a duration of zero.

The date after which you can no longer cache licenses.

Note: You cannot specify policy.licenseCaching.duration and policy.licenseCaching.endDate concurrently.

Indicates whether anonymous license acquisition is allowed. The default is set to false, which means that a username and password is required.

If a username and password is required, this property specifies an optional name qualifier for user names.

Custom name/value pairs to be used by the server during license acquisition. You can apply the following format to specify properties: policy.customProp.n=name=value

Specifies the playback window in minutes. This value represents how long the license is valid after the first time that protected content is played.

Output protection constraints, which must be one of the following values:

• NO_PROTECTION
• USE_IF_AVAILABLE
• REQUIRED
• NO_PLAYBACK

Specifies the minimum security level to allow the DRM module to access protected content.

The application runtime module must have at least the specified minimum security level to access protected content.

A allow list of non-Flash applications (Adobe AIR, iOS, Android, etc.) that are allowed to play protected content. The property must use the following format: pubId[:appId[:[min]:[max]]]

A allow list of SWF applications that are allowed to play protected content. The property must use the following format:

• URL
• file=swf_file
• time=max_time_to_verify

Custom name/value pairs that you must include in licenses when the licenses are issued to users. You need to specify the following format:

policy.license.customProp.n=name

You can define this option multiple times for multiple custom properties.