DRM Overview
Certificate Enrollment Guide
- About certificates
- Prerequisites
- About certificate enrollment roles
- Add Requesters
- Create a Secondary Administrator
- Request certificates
- Deploy certificates
- Store keys
- Renew certificates
Adobe Primetime DRM SDK 5.3.1
- Adobe Primetime DRM SDK - An overview
- About Adobe Primetime DRM
- Key features
- Terminology and core concepts
- Content distribution workflow
  - Content preparation
  - Content acquisition
- Adobe Primetime DRM components
- Deploy Adobe Primetime DRM
- Additional Deployment Scenarios
  - UltraViolet media and Adobe Primetime DRM
  - Adobe Primetime authentication and Adobe Primetime DRM
DRM Quick-Start Guide
- Getting Started
- Install Tomcat
- Set up and deploy the server for Protected Streaming
- Package encrypted content
- Install Flash Player and playback test content
- Play back a locally packaged video
- Next Steps
Adobe Primetime Cloud DRM Quick-Start Guide
- What is included with Primetime Cloud DRM
- What is NOT supported by Primetime Cloud DRM
- Prerequisites
- Packaging options
- Test the packaged content
- Triaging errors
- Custom authentication/entitlement
- Adobe Primetime authentication (Optional)
- Creating custom DRM policies (Optional)
- Update existing DRM content to use Cloud DRM (Optional)
- Streaming to Xbox360 (Optional)
Using the Adobe Primetime DRM Key Server
- Requirements for using Primetime DRM Key Server
- Deploy the Primetime DRM Key Server
- Packaging content
Adobe Primetime DRM Secure Deployment Guidelines
- Introduction to Network Topology
- Vendor-specific security information
- Physical security and access
- Packaging and protecting content
- Ensuring compatibility with Flash Media Rights Management Server 1.x
- Issue and protect the License Server
Multi-DRM Workflows
- Multi-DRM Workflows
- Primetime DRM Cloud Quick-start
- Workflows: Package, License, and Play
- Generic Workflows
  - Primetime Packager / Cloud DRM / TVSDK
  - ExpressPlay Packager / Cloud DRM / TVSDK
- Feature Topics
- ExpressPlay license token request / response reference
- Migrating from Access to Multi-DRM
- Glossary
Adobe Primetime DRM On Premises Individualization Server Guide
- Software Requirements
- Server configuration properties
- Monitoring
- Update the License Server WAR File
- Generate the On Premises DRM Metadata
- Client Integration
- Sample Client Requests
- FAQ
Primetime DRM Server for Protected Streaming 5.3.1
- About Adobe Primetime DRM Server for Protected Streaming
- About usage rules
- Requirements
- Understanding Deployment
Using the Adobe Primetime DRM SDK for Protecting Content - 5.3.1
- What is new in Adobe Primetime DRM
- Usage rules and Authentication
- Runtime and application restrictions
- Other DRM policy options
- Device Group Domain Registration
- Output protection controls
- Packaging Options
- Setting up the SDK
- Work with DRM policies
- Package media files
- Pre-generating and embedding licenses
  - Pre-generating licenses
  - Embedding licenses
- Implement a License Server
- Revoke client credentials
- Create video players
Resolution-Based Output Protection 5.3.1
- RBOP Overview
- RBOP Concepts
- RBOP Client Support
- Sample RBOP Configuration
- RBOP Grammar
- RBOP FAQ
Adobe Primetime DRM Reference Implementations 5.3.1
- About the reference implementations
- Typical workflow
- Command-line tools
  - Overview
  - Command-line tools requirements
  - Install the command-line tools
- Configure and run the command-line tools
  - Overview
  - About command-line tools configuration files
  - DRM Policy Manager
  - Policy Manager Command-line usage
  - Configuration properties
  - Non-SWF Application Allow listing
  - SWF Application Allow listing
- DRM Media Packager
- DRM Policy Update List Manager
- DRM Revocation List Manager
- DRM License Generator
- DRM License Embedder
- AIR Publisher ID utility
- License server
- Configuration
  - License server properties file
  - Prepare passwords for the Server properties files
  - Prepare passwords using Ant
  - Prepare passwords using Java
  - Remote key delivery properties (iOS)
  - Set up the license server database
  - Configure the license server database
  - HSM configuration
  - Cross-domain policy file
- Deploy the license server
- Troubleshooting
- Check whether the license server started properly
- Determining if Reference Implementation License Server runs properly
- Implementing the usage models
  - Implementing the usage models overview
  - Enable the usage model demo
  - Configure usage model demo mode
  - Update the reference implementation DB
  - Usage model demo business rules
- Domain registration
  - Overview
  - Implement identity-based domain registration
  - Identity-based domain registration logic
  - Implement anonymous domain registration
  - Anonymous domain logic
- Migrate from FMRMS 1.0 or 1.5 to Adobe Primetime DRM 2.0 or later
- Upgrade existing deployments
  - Upgrade existing deployments overview
  - Set up a domain server
Adobe Primetime TVSDK-DRM Workflow
- TVSDK-DRM client-side workflow overview
- Primetime DRM content protection options
- Primetime DRM on the client
- Primetime DRM license server
- License acquisition process overview
- License acquisition process details
- Pre-loading licenses for offline playback
- Using the DRMStatusEvent class
- Using the DRMAuthenticateEvent class
  - Create a DRMAuthenticateEvent handler
  - Create an authentication UI
- Using the DRMErrorEvent class
- Using the DRMManager class
- Using the DRMContentData class
- Out-of-band licenses
- Device domain support
- License preview
- Delivering content
DRM Client Error Message Reference
Using Adobe Access DRM With an External Key Management System
- Adobe Access DRM External CEK Overview
- Standard AAXS DRM Workflow
- AAXS DRM External CEK Workflow
- Using External CEK to Vend and Package Licenses
Use the Adobe Access Server for Protected Streaming
- About Adobe Access Server for Protected Streaming
- Usage rules
- Requirements
- Deploying the Adobe Access Server for Protected Streaming
- License server configuration files
- Crossdomain policy file
- Custom authorization extensions
- Performance tuning
  - Global Configuration File
- Upgrading the Adobe Access Server for Protected Streaming
- Updating configuration files
- Packaging content
- Adobe Access Server for Protected Streaming utilities
Adobe Access Secure Deployment Guidelines
- Introduction to Network Topology
- Vendor-specific security information
- Physical security and access
- Packaging and protecting content
- Protect and issue licenses
An Overview of Adobe Access SDK
- An overview of Adobe Access SDK
- About Adobe Access
- Key features
- Terminology and core concepts
- Content distribution workflow
  - Content preparation
  - Content acquisition
- Adobe Access components
- Deploy Adobe Access
- Additional Deployment Scenarios
  - UltraViolet media and Adobe Access
  - Adobe Pass and Adobe Access
Using the Adobe Access SDK for Protecting Content
- Introduction
- User authentication
- Time-based rules
- Runtime and application restrictions
- Other policy options
- Output protection controls
- Packaging Options
- Setting up the SDK
- Working with policies
- Packaging media files
- Pre-generating and embedding licenses
- Implementing the License Server
  - Implementing the License Server
  - License Server deployment options
- Processing Adobe Access requests
- Revoking client credentials
- Creating video players
Adobe Access Reference Implementations
- Overview - Using the reference implementations
- Command line tools for packaging content and creating revocations lists
- Policy Manager
- Media Packager
- Policy Update List Manager
- Revocation List Manager
- AIR Publisher ID utility
  - AIR Publisher ID utility overview
  - Command line usage
- License Generator
- License Embedder
  - License Embedder overview
  - Command line usage
- License server and watched folder packager
- Deploying the license server and watched folder packager
  - Deploying the license server and watched folder packager overview
  - Troubleshooting
- Determining if Reference Implementation License Server is running properly
- Implementing the usage models
- Implementing domain registration
- Migrating from FMRMS 1.0 or 1.5 to Adobe Access 2.0 and above
- Upgrading existing deployments
- Set up a domain server
- Flash Access Manager AIR application usage

Setting up the SDK

To set up the Adobe® Access™ for use, copy files from the DVD. These files include JAR files containing code, certificates, and third-party classes. In addition, request a certificate from Adobe Systems Incorporated. You will be issued multiple credentials used to protect the integrity of packaged content, licenses, and communication between the client and server.

The Adobe Access SDK is available in two types:

Adobe Access Core SDK
Adobe Access Professional SDK

The following table shows a basic comparison of Adobe Access SDKs:

Feature	Adobe Access Core SDK	Adobe Access Professional SDK
Flash Access 2.0 features	Available	Available
Key rotation	-	Available
Domain Support	Available	Available
Enhanced License Chaining	Available	Available
Synchronization Messages	Available	Available
License Pre-Generation	Available	Available
Embedded Licenses	Available	Available

Setting up the development environment

From the DVD, copy the following SDK files for use in your development environment and your Java classpath:

adobe-flashaccess-certs.jar (contains Adobe root certificates)
adobe-flashaccess-sdk.jar (contains Adobe Access Core SDK classes)
adobe-flashaccess-sdk-pro.jar (contains Adobe Access Professional SDK classes, required only for Professional features)

You need the following third party JAR files also located on the DVD in the SDK’s “thirdparty” folder:

bcmail-jdk15-141.jar
bcprov-jdk15-141.jar
commons-discovery-0.4.jar
commons-logging-1.1.1.jar
cryptoj.jar
jaxb-api.jar
jaxb-impl.jar
jaxb-libs.jar
relaxngDatatype.jar
rm-pdrl.jar
xsdlib.jar

For improved performance, you can optionally enable native support for cryptographic operations by deploying the platform-specific libraries located in the “thirdparty/cryptoj” folder of the SDK. To enable native support, add the library for your platform (jsafe.dll for Windows or libjsafe.so for Linux) to the path. The 32-bit and 64-bit versions of these libaries are provided. (Note that the 64-bit version should only be used if you have a 64-bit OS and you are running the 64-bit version of Java).

Additionally, an optional part of the SDK is adobe-flashaccess-lcrm.jar. This file is only needed for functionality related to Adobe Flash Media Rights Management Server (FMRMS) 1.x compatibility. If you previously deployed FMRMS 1.x and do not want to re-package your FMRMS-protected content, you must add support to your license server so it will be able to handle old content and clients.