DRM Overview
Certificate Enrollment Guide
- About certificates
- Prerequisites
- About certificate enrollment roles
- Add Requesters
- Create a Secondary Administrator
- Request certificates
- Deploy certificates
- Store keys
- Renew certificates
Adobe Primetime DRM SDK 5.3.1
- Adobe Primetime DRM SDK - An overview
- About Adobe Primetime DRM
- Key features
- Terminology and core concepts
- Content distribution workflow
  - Content preparation
  - Content acquisition
- Adobe Primetime DRM components
- Deploy Adobe Primetime DRM
- Additional Deployment Scenarios
  - UltraViolet media and Adobe Primetime DRM
  - Adobe Primetime authentication and Adobe Primetime DRM
DRM Quick-Start Guide
- Getting Started
- Install Tomcat
- Set up and deploy the server for Protected Streaming
- Package encrypted content
- Install Flash Player and playback test content
- Play back a locally packaged video
- Next Steps
Adobe Primetime Cloud DRM Quick-Start Guide
- What is included with Primetime Cloud DRM
- What is NOT supported by Primetime Cloud DRM
- Prerequisites
- Packaging options
- Test the packaged content
- Triaging errors
- Custom authentication/entitlement
- Adobe Primetime authentication (Optional)
- Creating custom DRM policies (Optional)
- Update existing DRM content to use Cloud DRM (Optional)
- Streaming to Xbox360 (Optional)
Using the Adobe Primetime DRM Key Server
- Requirements for using Primetime DRM Key Server
- Deploy the Primetime DRM Key Server
- Packaging content
Adobe Primetime DRM Secure Deployment Guidelines
- Introduction to Network Topology
- Vendor-specific security information
- Physical security and access
- Packaging and protecting content
- Ensuring compatibility with Flash Media Rights Management Server 1.x
- Issue and protect the License Server
Multi-DRM Workflows
- Multi-DRM Workflows
- Primetime DRM Cloud Quick-start
- Workflows: Package, License, and Play
- Generic Workflows
  - Primetime Packager / Cloud DRM / TVSDK
  - ExpressPlay Packager / Cloud DRM / TVSDK
- Feature Topics
- ExpressPlay license token request / response reference
- Migrating from Access to Multi-DRM
- Glossary
Adobe Primetime DRM On Premises Individualization Server Guide
- Software Requirements
- Server configuration properties
- Monitoring
- Update the License Server WAR File
- Generate the On Premises DRM Metadata
- Client Integration
- Sample Client Requests
- FAQ
Primetime DRM Server for Protected Streaming 5.3.1
- About Adobe Primetime DRM Server for Protected Streaming
- About usage rules
- Requirements
- Understanding Deployment
Using the Adobe Primetime DRM SDK for Protecting Content - 5.3.1
- What is new in Adobe Primetime DRM
- Usage rules and Authentication
- Runtime and application restrictions
- Other DRM policy options
- Device Group Domain Registration
- Output protection controls
- Packaging Options
- Setting up the SDK
- Work with DRM policies
- Package media files
- Pre-generating and embedding licenses
  - Pre-generating licenses
  - Embedding licenses
- Implement a License Server
- Revoke client credentials
- Create video players
Resolution-Based Output Protection 5.3.1
- RBOP Overview
- RBOP Concepts
- RBOP Client Support
- Sample RBOP Configuration
- RBOP Grammar
- RBOP FAQ
Adobe Primetime DRM Reference Implementations 5.3.1
- About the reference implementations
- Typical workflow
- Command-line tools
  - Overview
  - Command-line tools requirements
  - Install the command-line tools
- Configure and run the command-line tools
  - Overview
  - About command-line tools configuration files
  - DRM Policy Manager
  - Policy Manager Command-line usage
  - Configuration properties
  - Non-SWF Application Allow listing
  - SWF Application Allow listing
- DRM Media Packager
- DRM Policy Update List Manager
- DRM Revocation List Manager
- DRM License Generator
- DRM License Embedder
- AIR Publisher ID utility
- License server
- Configuration
  - License server properties file
  - Prepare passwords for the Server properties files
  - Prepare passwords using Ant
  - Prepare passwords using Java
  - Remote key delivery properties (iOS)
  - Set up the license server database
  - Configure the license server database
  - HSM configuration
  - Cross-domain policy file
- Deploy the license server
- Troubleshooting
- Check whether the license server started properly
- Determining if Reference Implementation License Server runs properly
- Implementing the usage models
  - Implementing the usage models overview
  - Enable the usage model demo
  - Configure usage model demo mode
  - Update the reference implementation DB
  - Usage model demo business rules
- Domain registration
  - Overview
  - Implement identity-based domain registration
  - Identity-based domain registration logic
  - Implement anonymous domain registration
  - Anonymous domain logic
- Migrate from FMRMS 1.0 or 1.5 to Adobe Primetime DRM 2.0 or later
- Upgrade existing deployments
  - Upgrade existing deployments overview
  - Set up a domain server
Adobe Primetime TVSDK-DRM Workflow
- TVSDK-DRM client-side workflow overview
- Primetime DRM content protection options
- Primetime DRM on the client
- Primetime DRM license server
- License acquisition process overview
- License acquisition process details
- Pre-loading licenses for offline playback
- Using the DRMStatusEvent class
- Using the DRMAuthenticateEvent class
  - Create a DRMAuthenticateEvent handler
  - Create an authentication UI
- Using the DRMErrorEvent class
- Using the DRMManager class
- Using the DRMContentData class
- Out-of-band licenses
- Device domain support
- License preview
- Delivering content
DRM Client Error Message Reference
Using Adobe Access DRM With an External Key Management System
- Adobe Access DRM External CEK Overview
- Standard AAXS DRM Workflow
- AAXS DRM External CEK Workflow
- Using External CEK to Vend and Package Licenses
Use the Adobe Access Server for Protected Streaming
- About Adobe Access Server for Protected Streaming
- Usage rules
- Requirements
- Deploying the Adobe Access Server for Protected Streaming
- License server configuration files
- Crossdomain policy file
- Custom authorization extensions
- Performance tuning
  - Global Configuration File
- Upgrading the Adobe Access Server for Protected Streaming
- Updating configuration files
- Packaging content
- Adobe Access Server for Protected Streaming utilities
Adobe Access Secure Deployment Guidelines
- Introduction to Network Topology
- Vendor-specific security information
- Physical security and access
- Packaging and protecting content
- Protect and issue licenses
An Overview of Adobe Access SDK
- An overview of Adobe Access SDK
- About Adobe Access
- Key features
- Terminology and core concepts
- Content distribution workflow
  - Content preparation
  - Content acquisition
- Adobe Access components
- Deploy Adobe Access
- Additional Deployment Scenarios
  - UltraViolet media and Adobe Access
  - Adobe Pass and Adobe Access
Using the Adobe Access SDK for Protecting Content
- Introduction
- User authentication
- Time-based rules
- Runtime and application restrictions
- Other policy options
- Output protection controls
- Packaging Options
- Setting up the SDK
- Working with policies
- Packaging media files
- Pre-generating and embedding licenses
- Implementing the License Server
  - Implementing the License Server
  - License Server deployment options
- Processing Adobe Access requests
- Revoking client credentials
- Creating video players
Adobe Access Reference Implementations
- Overview - Using the reference implementations
- Command line tools for packaging content and creating revocations lists
- Policy Manager
- Media Packager
- Policy Update List Manager
- Revocation List Manager
- AIR Publisher ID utility
  - AIR Publisher ID utility overview
  - Command line usage
- License Generator
- License Embedder
  - License Embedder overview
  - Command line usage
- License server and watched folder packager
- Deploying the license server and watched folder packager
  - Deploying the license server and watched folder packager overview
  - Troubleshooting
- Determining if Reference Implementation License Server is running properly
- Implementing the usage models
- Implementing domain registration
- Migrating from FMRMS 1.0 or 1.5 to Adobe Access 2.0 and above
- Upgrading existing deployments
- Set up a domain server
- Flash Access Manager AIR application usage

RBOP Client Support

This section describes the features available with different versions of Flash Player and TVSDK.

Error Dispatch - The TVSDK platforms listed below dispatch a DRM Runtime Error when the resolution of the content that is being played exceeds the resolution that is allowed for the device configuration that is defined in the DRM policy:

Flash Player Versions 18 through 20
Android - Versions
iOS - Versions

NOTE

All Flash and mobile platforms support Error Dispatch, however only the TVSDK clients listed above process RBOP-related errors.
RBOP-related DRM Client Errors:
3371 - Malformed resolution based on output protection constraints in the license.
3372 - The content’s resolution is larger than the maximum resolution that is specified in the output-protection constraint. (This can occur if somebody tried to inject content meant for another device.)
3373 - The content’s resolution is larger than the resolution that is specified by the currently active output-protection constraint. (This means we will have to downgrade.)

Automatic Downscaling - The technique used to downscale varies by platform and Flash Player version:

Flash Player Version 21: Supports RBOP with Automatic Downscaling (intelligent bitrate switching)
Firefox Version 38 and later on Windows (with Access CDM): Adobe automatically downgrades a higher bitrate stream to a lower one (as opposed to downloading a lower-grade stream).

NOTE

These platforms automatically down-scale video and display the content at a resolution that is lower than or equal to what is specified by the DRM policy. With this feature, content will always be played back to the client, as long as there is an available stream that meets the DRM policy restrictions.

Legacy Output Protection - Clients using Flash Players prior to Version 18 can only handle legacy OP restrictions. Clients with Flash Player Version 18 and later can handle either legacy or RBOP restrictions. If you are setting RBOP restrictions, you should also set legacy OP restrictions for older clients. For clients that support RBOP, RBOP restrictions trump legacy OP restrictions.