DRM Policy Update List Manager

Use the Primetime DRM Policy Update List Manager command-line tool ( AdobePolicyUpdateListManager.jar) to create and manage DRM policy update lists, and to check whether policies have been updated or revoked.

Before you run the Policy Update List Manager command-line tool, you must set properties in the Policy Update List Manager and Revocation List Manager Properties section of your configuration file.

NOTE

You can also specify all Policy Update List Manager properties from the command line.

Policy Update List Manager command-line usage

Create a policy update list:

java -jar AdobePolicyUpdateListManager.jar
<i class="+ topic ph hi-d="" i "="">
  destfile [
 <i class="+ topic ph hi-d="" i "="">
   options]
 </i class="+ topic>
</i class="+ topic>
  • destfile indicates the name of the file into which the DRM policy update list is written.

View an existing policy update list:

java -jar AdobePolicyUpdateListManager.jar -d
<i class="+ topic ph hi-d="" i "="">
  filename
</i class="+ topic>
  • filename The name of the policy update list file.

Table 4: Command-line options

Command line option

Description

-c configfile

Specifies the name and location of the configuration file.

If you do not specify a name or a location, the DRM Policy Update List Manager searches for flashaccesstools.properties in the current working directory.

Note: Options that you specify on the command line take precedence over the options you specify in the configuration file.

-d filename

Displays information about the DRM policy update list.

-e date

(Optional) The expiration date of the DRM policy update list.

Use the format yyyy-mm-dd or yyyy-mm-dd-h24:min:sec (for example, 2009-01-31-14:30:00 represents January 31 at 2:30 PM).

-f filename [certfile]

Adds all entries from the existing DRM policy update list. You can only specify one existing file.

If the existing list has been signed with a credential other than the one being used to sign the new list, then you need to specify its certificate file to verify its signature.

-noprompt

Do not ask if the destination file should be overwritten. If the destination file already exists and -o is not set, an error occurs.

-o

If the destination file already exists, overwrite it without prompting.

-r policyID date " reasonCode " " reasonText " " reasonURL "

(Optional) Revokes the DRM policy ID on the specified date. You can provide an optional reason code, reason text, and reason URL. You need to specify an empty string "" to indicate that no value is provided for the optional parameters. You can specify the date in yyyy-mm-dd or yyyy-mm-dd-h24:min:sec in these formats. For example, 2008-12-1 or 2008-12-1-00:00:00 represents midnight on December 1, 2008). If you do not specify a date, then the current date is automatically applied. Therefore the reason code must be greater than or equal to 0. You can also specify multiple -r options.

-rf policyFilename date " reasonCode " " reasonText " " reasonURL "

Performs the same action as the -r option. However, it extracts the DRM policy identifier from a specified file.

-u policyFilename " reasonCode" " reasonText" " reasonURL"

Replaces any matching DRM policy in a license request with this DRM policy by using the given reason code (optional), reason text (optional), and reason URL (optional).

An empty string "" indicates that you have not provided any value for the optional parameters.

The reason code must be greater than or equal to 0 . You can specify multiple -u options.

Configuration properties

The following Primetime DRM Policy Update List Manager properties specify a PKCS12 file that includes credentials for signing revocation lists (License Server Certificate), along with a password.

  • revocation.sign.certfile=license-server-credentials.pfx
  • revocation.sign.certpass=password

On this page