Adobe Community : All Content - Adobe Access DRM / Primetime DRM

cannot inport photos

forums_noreply@adobe.com — Tue, 11 Nov 2014 22:43:59 GMT

just installed and unable to import photos - error reads lightroom 64 bit has stopped working and closes the program -

IphoneをPCに接続すると「Elements Organizer」が立ち上がる　立ち上がらない方法

forums_noreply@adobe.com — Mon, 10 Nov 2014 11:44:00 GMT

Elements Organizerが立ち上がらないようにする方法を教えていただけませんか？

ちなみにこれは何でしょうか？

Pre-Elementsを立ち上げると「互換性のないディスプレイドライバーが検出されました。…ドライバーを更新してください」と表示されます。更新する方法を教えてください

forums_noreply@adobe.com — Mon, 10 Nov 2014 11:23:01 GMT

@@Pre-Elementsを立ち上げると「互換性のないディスプレイドライバーが検出されました。…ドライバーを更新してください」と表示されます。更新する方法を教えてください。

Flash update?

forums_noreply@adobe.com — Sun, 10 Aug 2014 21:03:36 GMT

Adobe flash hasn't been working on any of the websites I'm going to it tells me to update flash but every single time I go to update it, it says it's updated. Is it safari that's messing up? Maybe I should try a different browser.@

How to I now repair adobe authorization for cs3?

forums_noreply@adobe.com — Sat, 01 Nov 2014 15:58:22 GMT

Authorization code broke out of the blue yesterday and disk permission repair did not work. Again this for photoshop cs3. Thanks!

disabled Adobe Flash Player by mistake.

forums_noreply@adobe.com — Thu, 30 Oct 2014 12:01:33 GMT

Somehow i've disabled my adobe flash player. I would like to enable but i think it might be in a download file, if so i can't open it, it just say's save.

Any help would be appreciated, Thanks.

Ereader Kobo doesn't recognize drm

forums_noreply@adobe.com — Sat, 08 Nov 2014 23:01:53 GMT

Hi,

I recently bought an ebook protected with DRM. I downloaded it with ADE 4.0, and then sent it on my Ereader (Kobo). But when I try to read it on my ereader, an error appears, saying that the document is protected with DRM and that this document can't be opened with my Adobe ID.

This is very strange because I authorized (with ADE) this ereader to use my Adobe ID several days before I bought this article.

Any idea?

Thanks,

Yann

DRM protected books

forums_noreply@adobe.com — Thu, 30 Oct 2014 18:51:14 GMT

I was able to read all of my previously downloaded e-books on my Sony e-reader until I tried to correct a mismatch between the e-mail address shown as my Adobe ID on the reader software opening page and my e-mail ID registered with Adobe. I de-authorised the computer and e-reader and re-authorised them with the correct e-mail ID. Now I cannot open any book as it says it is DRM protected. HELP

I am trying to convert pdf to word, when I click convert, it sends me back to the subscription page, which I just completed

forums_noreply@adobe.com — Fri, 31 Oct 2014 14:15:12 GMT

I am trying to convert pdf to word, when I click convert, it sends me back to the subscription page, which I just completed

ERROR 100

forums_noreply@adobe.com — Sat, 08 Nov 2014 15:18:58 GMT

EVERY SINGLE LAUNCHER ITS SAYS IT CANT CONNECT TO SERVER ERROR 100 WAST OF TIME AND MONEY

reset drm licenses on devices

forums_noreply@adobe.com — Tue, 28 Oct 2014 07:56:58 GMT

I need to reset some old devices which are broken and has been thrown away. I can not activate my new device as I am did allready activate the maximum number of devices, even two of those are allready broken and were disposed of. Can anybody help?

Premiere version for windows XP - How can I dounload one ?

forums_noreply@adobe.com — Tue, 28 Oct 2014 07:08:09 GMT

Premiere version for windows XP - How can I dounload one ?

Failed to start flashaccess packager

forums_noreply@adobe.com — Thu, 23 Oct 2014 15:19:49 GMT

It seemed that serve failed to open "flashaccess-refimpl-packager.properties" , but the classpath is set correctly, please see below settings.
1) Set classpath to /opt/drm/resources which include "flashaccess-refimpl-packager.properties" and other properties files.

2) Copy flashaccess-packager.war to /usr/tomcat/webapps

3) License Server is setup correctly.

Total successful requests = 0 requests in 0 ms.

Average response time = 0 ms. Average throughput = 0 requests per sec

4) Restart Tomcat server and got log below:

2014-10-23 18:47:04,610 INFO [com.adobe.flashaccess.refimpl.packager.RefImplPackagerServer] Packager thread started. Thread: Thread[WatchedFolderPackagerThread,1,main]

2014-10-23 18:47:04,719 FATAL [com.adobe.flashaccess.refimpl.packager.RefImplPackagerServer] Error reading server properties

java.lang.IllegalArgumentException: Filename and password required to load Signing Credential

at com.adobe.flashaccess.core.cert.ServerCredentialImpl.<init>(ServerCredentialImpl.java:92)

at com.adobe.flashaccess.sdk.cert.ServerCredentialFactory.getServerCredential(ServerCredenti alFactory.java:90)

at com.adobe.flashaccess.refimpl.util.ParamsReader.loadServerCredential(ParamsReader.java:15 5)

at com.adobe.flashaccess.refimpl.util.ParamsReader.readPackagerSecurityParams(ParamsReader.j ava:636)

at com.adobe.flashaccess.refimpl.util.ParamsReader.readPackagerParams(ParamsReader.java:624)

at com.adobe.flashaccess.refimpl.packager.RefImplPackagerServer.packagerSetup(RefImplPackage rServer.java:115)

at com.adobe.flashaccess.refimpl.packager.RefImplPackagerServer.run(RefImplPackagerServer.ja va:148)

at java.lang.Thread.run(Unknown Source)

2014-10-23 18:47:04,720 INFO [com.adobe.flashaccess.refimpl.packager.RefImplPackagerServer] Exiting Packager thread.

5) Try to curl http://10.4.80.21:8080/flashaccess-packager/articles

Got error:

<html><head><title>Apache Tomcat/6.0.18 - Error report</title><style></style> </head><body><h1>HTTP Status 500 - </h1><HR size="1" noshade="noshade"><p><b>type</b> Exception report</p><p><b>message</b> <u></u></p><p><b>description</b> <u>The server encountered an internal error () that prevented it from fulfilling this request.</u></p><p><b>exception</b> <pre>java.lang.UnsupportedOperationException: Only POST HTTP method applies for this service.

com.adobe.flashaccess.refimpl.userinterface.UICommunicator.doGet(UICommunicator.java:1708 )

javax.servlet.http.HttpServlet.service(HttpServlet.java:617)

javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

DRM Error 3321 Causes & Resolution

forums_noreply@adobe.com — Fri, 16 Aug 2013 21:04:13 GMT

[ Problem Background ]

Adobe Access DRM needs to download a device-specific key before protected content can be consumed. This step is called individualization. If user is getting error code 3321 it means the individualization step failed.

[ Root Cause ]

The client needs to make network connection to http://individualization.adobe.com in order to individualize. The failure most likely was caused by a temporary network connection failure. To verify: use the browser and connect to http://individualization.adobe.com/flashaccess/i15n/v5 . View the page source. If everything is fine you will see something like:

<html>

<head>

</head>

<body>

</body>

</html>

[ Resolution ]

Make sure the network connection is fine. Pay special attention to any proxies and firewalls which may be in place.

Also, you may add additional logic to your video application to determine if it is able to query the URL endpoing for individualization in the event handler for 3321. If the connection isn't possible, display a dialog to the end user to check for network connectivity issues (to http://individualization.adobe.com) - perhaps they are behind a firewall or in a network that restricts access to the individualization server.

[ Problem Not Resolved? ]

This article details what Adobe believes will resolve 3321 errors. If this hasn't resolved your issue, we would love to hear more from you! Please reply below with the following information:

- If you don't see the <html> code that is shown above, what are you seeing? Please cut & paste.

- Date & time that you noticed this outage

- OS & OS version of the affected computer

- Browser & browser version of the affected computer

E_AUTH_BAD_SERVER_RESPONSE

forums_noreply@adobe.com — Fri, 10 Oct 2014 10:21:30 GMT

On Android phone, in Aldiko app, login in with Adobe login to read DRM protected epub following error message appears: E_AUTH_BAD_SERVER_RESPONSE. According Adobe site max 6 devices can be connected (and we've more), for reset account contact service desk. After chat session I'm pointed here. Who can help?

DRM fails to authorize device although log in details are correct

forums_noreply@adobe.com — Wed, 08 Oct 2014 18:11:39 GMT

I've downloaded Aldiko onto a tablet so I can read ebooks from my library; I've signed up for an Adobe account and had the verification email from Adobe but when I try to sign into Adobe DRM I keep getting an error message: E_ADEPT_REQUEST_EXPIRED http://adeactivate.adobe.com/adept/Activate

and then loads of numbers. How can I get signed in?

Hello, how can I protect my PDF document (electronic book written by me) from copying?

forums_noreply@adobe.com — Fri, 03 Oct 2014 19:43:34 GMT

Hello, how can I protect my PDF document (electronic book written by me) from copying? I intend to sell copies of my book and I need copy protection. Can you recomend a company that provides this service? and can Adobe provide it? Thanks in advance.

Why is Firefox not finding Flash Player Plugin on Centos

forums_noreply@adobe.com — Fri, 26 Sep 2014 16:20:44 GMT

In our production environment we are installing a Web-based product. The Operating System is Centos 6.5. For this product, we have installed Firefox-33 and Flash Player 11.2.202.406-release.x86_64. The problem is that Firefox starts, but it does not detect Flash Player Plugin.

The following error message is reported when we run Firefox:

1411663263429 addons.manager ERROR Exception calling provider startup: [Exception... "Component returned failure code: 0x80040111 (NS_ERROR_NOT_AVAILABLE) [mozIGeckoMediaPluginService.addPluginDirectory]" nsresult: "0x80040111 (NS_ERROR_NOT_AVAILABLE)" location: "JS frame :: resource://gre/modules/addons/OpenH264Provider.jsm :: OpenH264Provider.startup :: line 271" data: no] Stack trace: OpenH264Provider.startup()@resource://gre/modules/addons/OpenH264Provider.jsm:271 < AMI_callProviders()@resource://gre/modules/AddonManager.jsm:875 < AMI_startup()@resource://gre/modules/AddonManager.jsm:750 < AMP_startup()@resource://gre/modules/AddonManager.jsm:2322 < AMC_observe()@resource://gre/components/addonManager.js:55 <

Questions are:

Why is Firefox not detecting or connecting to Flash Player Plugin?
Is Gecko Media Plugin not functioning, or not able to detect Flash Player?
What steps should we take so that Firefox can detect the Flash Player Plugin ?

We would really appreciate any help in ths regard. In case this is not the right (sub)-forum, please advise where we should post this question.

Our past searches found some links like below, which did not help or cover this specific query:

Flash Player Does not Show up on Firefox but not Chromium

http://stackoverflow.com/search?q=firefox+on+centos+flash+plugin+

http://www.niharsworld.com/2012/06/15/solved-adobe-flash-player-plugin-working-firefox-13- white-screen-visible-video/

Play streaming videos on firefox with html5 or flash

Adobe Access - new drmNativeInterface.framework for iOS 8

forums_noreply@adobe.com — Thu, 11 Sep 2014 06:29:38 GMT

Hi,

We are a company that has been using Adobe Access for more than a year and so far we are very happy with the fact that the Adobe Access 4 can support playback DRM content on Desktop / Android and iOS without any problem.

But recently, to prepare for the upcoming iOS 8, I have upgraded my development iPhone 5 and iPad 2 to the iOS 8 Beta and the drmNativeInterface.framework starts working wrongly. Sometime I can stream my DRM HLS content, sometimes, the drmNativeInterface.framework just stuck in the middle without any error or exception (this issue happens quite frequently like 7 out of 10 times). After debugging line by line, followings are the piece of code that make the framework stucked without any error or exception.

1. The framework sometime stops working when we try to get the singleton instance of DRMManger

_drmManager = [DRMManager sharedManager];

2. Sometime it stops when we try to parse the M3U8 url:

[_drmManager getUpdatedPlaylist:m3u8Url

error:drmErrorHandler

updated:^(NSURL * newPlaylist, DRMMetadata * newMetadata){

NSLog(@"Update M3U8 URL Player list for license process");

//Successfully retrieved the metadata from provided link

m3u8PlayList = newPlaylist;

_metadata = newMetadata;

}];

3. Sometime it stops where the DRMSession is initialized (after the User Authentication process is completed)

_session = [_drmManager

createDRMSession:_metadata

playlist:m3u8PlayList

error:^(NSUInteger majorCode, NSUInteger minorCode, NSError *platformError) {

NSLog(@"Failed to get DRM Session");

}

complete:^{

NSLog(@"Successfully obtained DRM Session");

}];

Most of the time, it stops when we try to get the singleton instance of DRMManager ( issue number 1 )

I can ensure that the framework works very well with iOS6 and iOS7 (although iPhone 4 with iOS7 crashes while a lot during the DRMSession initialization).

If there is new version of drmNativeInterface.framework, please kindly let me know where we an get it as the drmNativeInterface.framework we have been using is quite old (for iOS5 I think).

Thank you very much.

Jack

DRM Error: 3305[ServerConnectionFailed] and Error loading metadata file:Error #2048

forums_noreply@adobe.com — Tue, 02 Sep 2014 10:50:40 GMT

I am using the sample player in Adobe Access 4_0 SDK to play the encrypted video on FMS 5.0.

1) When trying to play the " http://.../vod/WorldCup.mp4" file and get the error "DRM Error: 3305[ServerConnectionFailed] Load http://.../vod/WorldCup.mp4 "

2) switch TVP mode. try to "Load DRM Metadata" and get the log " Error loading metadata file: Get URL:http://.../vod/WorldCup.mp4.metadata:Error #2048"

Request for Access DRM (license transport packager ) certificate, no reply.

forums_noreply@adobe.com — Wed, 27 Aug 2014 03:07:51 GMT

on 21 AUG we submitted license transport packager csr request file for Access DRM certificate. Refer to "AdobeAccess_4_CertEnrollment.pdf" we should get phone call or email within 3 days. but 7 days passed, we did't get any of them.

Please give us the status of the progress.

Flash access support on linux (ubuntu)

forums_noreply@adobe.com — Mon, 21 Nov 2011 10:37:49 GMT

Hi,

since the release of ubuntu 11.04 I've been unable to watch DRM-protected videos. Trying the test player at http://drmtest2.adobe.com:8080/SVP/SampleVideoPlayer_FP.html with video

http://drmtest2.adobe.com:8080/Content/anonymous.f4v the last message displayed is: "Updating CP module...." and then nothing happens.

I've tried deleting the NativeCache folder and a new libadobecp-xxx.so is downloaded and saved but still no progress.

I've tested with both the latest 11.1 player and the latest 11.2 beta player on Ubuntu 11.04 and 11.10.

Any plans on making this work again for newer linux systems since it works fine on ubuntu 10.10?

Jonas Hagberg

DRM error 3370?

forums_noreply@adobe.com — Thu, 03 Jul 2014 02:52:51 GMT

Hi,

I've just found this page: Protected video content does not play and followed the steps at the bottom how to play a test video. Unfortunatelly it does not play. If I click the "Show DRM events" checkbox, the details are:

DRMErrorEvent dispatched by DRMManger received on Thu Jul 3 04:31:59 GMT+0200 2014

event type = drmError

Error Code = 3370 [Out of DRM Error range]

Sub Error Code = 1000937

Error Details =

drmUpdateNeeded = false

systemUpdateNeeded = false

I didn't find what error 3370 means.

I'm using flash player version 14.0.0.125. The folder C:\Users\username\AppData\Roaming\Adobe\Flash Player\NativeCache is empty.

I'm a software developer for 25 years, so I'm happy about helpful replies. Thank you in advance.

Where is PPAPI plug-in?

forums_noreply@adobe.com — Mon, 23 Jun 2014 14:51:33 GMT

I use an iMac with OS v10.9.3, the latest. But something about FlashPlayer eats at me.

In System Preferences / Flash Player I see this:

NPAPI Plug-in version 14.0.0.125 is installed. :-) But ...

PPAPI Plug-in is _not_ installed. [Emphasis _I_ added! :-) ]

Trying to seek "PPAPI Plug-in" with Adobe gets me nowhere-fast. So I ask this board, "Do I _need_ this PPAPI Plug-in?"

And, "What would the PPAPI Plug-in let me do, anyway?" Thank you, one who reads this Adobe Board.

Difference between getUniqueID() and getBytes() of class MachineID?

forums_noreply@adobe.com — Fri, 01 Oct 2010 16:45:44 GMT

Below is a snippet from our "Secure Deployment" guide, which is also good to know regarding MachineID. Further clarification will be added, since this could probably be described better. In essence, .getUniqueId() returns a unique identifier for the client that is tied to the runtime (Flash in IE vs Flash in Firefox vs AIR vs....). For each user account on the Windows machine, it will be different. For each different runtime, it will be a different ID. For each different browser, it will be a different ID. If the user uninstalls and reinstalls Flash, it will be a different ID. If the user were to go into the browser's Flash settings and de-authorize all licenses, the ID will change. In other words, the UUID returned by .getUniqueID will vary depending on which account and where the runtime is running from, and may change if the user uninstalls Flash or resets the license store.

However, if you use .getBytes() to persist the machineID somewhere, and then use machineID.matches(), that will instead disregard the runtime/account/browser/etc... being used and simply compare the hardware signature of the machine. This will always return you a TRUE if the machineID came from the same machine. The only drawback to this, though, is that if you have several machineIDs, you will have to compare the machineID with every existing machineID in order to determine if there is a match. If there is a large # of machineID, this computation can a long time to complete.

Depending on your particular use case, and tolerance for the limitations listed above you may choose to use .getUniqueID() (which is not as reliable as .matches()) or .matches() (which can take a long time to compare against all other MachineIDs, if there is a lot of existing MachineIDs to compare against)

////////////////////////////////

Tracking rollback and machine count when issuing licenses

If your implementation of Flash Access uses business rules that require the client to maintain state (for

example, the playback window interval), Adobe recommends that the server keep track of the rollback

counter.

The rollback counter is sent to the server in most requests from the client. If your implementation of

Flash Access does not require the rollback counter, it can be ignored. Otherwise, Adobe recommends that

the server store the random machine ID—obtained using

MachineToken.getMachineId().getUniqueId()—and the current counter value in a database.

If the business rules require that the number of machines for a user be tracked, the license server must

store the machine IDs associated with the user. The most robust way to track machine IDs is to store the

value returned by the MachineId.getBytes() method in a database. When a new request comes in,

compare the machine ID in the request against the known machine IDs using MachineId.matches().

MachineId.matches() performs a comparison of IDs to determine if they represent the same machine.

This comparison is only practical if there is a small number of machine IDs to compare against. For

example, if a user is allowed five machines within their domain, you can search the database for the

machine IDs associated with the user’s username and obtain a small set of data to compare against.

Note: This comparison is not practical for deployments allowing anonymous access. In such cases the

random machine ID can be used, however, this ID will not be the same if the user accesses content

from both Flash and Adobe AIR runtimes, and will not survive if the user reformats their hard drive.

Adobe AIR 14 video player app : windows 8+, Mac OS 10.8 &10.9, android 4+ not mentioned in Access tech specs

forums_noreply@adobe.com — Wed, 18 Jun 2014 22:05:29 GMT

We're currently studying to develop a video player app using AIR 14 targeting Windows, Mac OS and Android.

Access DRM is needed but reading online tech specs (URL Adobe Access - Tech specs), there is no mention of windows 8+, Mac OS 10.8 &10.9, android 4+ support.

Can you please give us accurate information on that topic ?

Thank you.

E_AUTH_BAD_DEVICE_KEY error

forums_noreply@adobe.com — Mon, 23 Jun 2014 18:28:13 GMT

E_AUTH_BAD_DEVICE_KEY error

DRMManager not throwing DRMErrorEvent when digital output is blocked

forums_noreply@adobe.com — Wed, 11 Jun 2014 19:21:46 GMT

I am hitting an issue with the DRMManager not throwing any errors when blocking output to external displays. When trying to start an HDS stream on a second monitor or through AirPlay desktop extending, playback is being successfully blocked but we I am not seeing an error event so that I can display a relevant error message and recover the state of the player. Are there known limitations for the DRMManager on OSX or any suggestions on detecting that playback has been blocked due to output limitations?

How to Use Adobe For TV Stream

forums_noreply@adobe.com — Sun, 12 Jan 2014 03:31:23 GMT

I Have a question How to make adobe with Tv Stream,i will googling but i don't see any question Exampla TV http://tvonlineindonesia.pathmo.com

Error with Verifying tenant 'flashaccessserver/sampletenant'.

forums_noreply@adobe.com — Mon, 02 Jun 2014 10:09:30 GMT

Here is the question

we deployed the Adobe Access license server with Adobe Access 2.0 SDK

the system is linux 64bit

the java version is 1.6

when we validate the license server

it showed

License Server is setup correctly.

Total successful requests = 0 requests in 0 ms.

Average response time = 0 ms. Average throughput = 0 requests per sec

Verifying tenant 'flashaccessserver/sampletenant'...

Schema ...

net.sf.ehcache.constructs.blocking.LockTimeoutException: Could not update object for cache entry with key "flashaccessserver////sampletenant".

at net.sf.ehcache.constructs.blocking.UpdatingSelfPopulatingCache.get(UpdatingSelfPopulating Cache.java:90)

at net.sf.ehcache.constructs.blocking.BlockingCache.get(BlockingCache.java:558)

at com.adobe.flashaccess.server.license.configuration.cachedecorator.CacheDecoratorConfigura tionFactory.getTenantConfiguration(CacheDecoratorConfigurationFactory.java:211)

at com.adobe.flashaccess.server.license.engine.LicenseEngine.verifyTenant(LicenseEngine.java :271)

at com.adobe.flashaccess.server.license.engine.LicenseEngine.processStatusRequest(LicenseEng ine.java:253)

at com.adobe.flashaccess.server.license.servlet.LicenseEngineDelegatorServlet.doGet(LicenseE ngineDelegatorServlet.java:72)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:290)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)

at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java: 436)

at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:342)

at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)

at com.adobe.flashaccess.server.license.servlet.LicenseRequestDispatchFilter.doFilter(Licens eRequestDispatchFilter.java:72)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:235)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at com.adobe.flashaccess.server.license.servlet.RequestCountFilter.doFilter(RequestCountFilt er.java:74)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:235)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)

at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)

at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)

at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.ja va:583)

at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)

at java.lang.Thread.run(Thread.java:662)

Caused by: net.sf.ehcache.CacheException: Could not fetch object for cache entry with key "flashaccessserver////sampletenant".

at net.sf.ehcache.constructs.blocking.SelfPopulatingCache.get(SelfPopulatingCache.java:87)

at net.sf.ehcache.constructs.blocking.UpdatingSelfPopulatingCache.get(UpdatingSelfPopulating Cache.java:76)

... 29 more

Caused by: java.lang.NullPointerException

at java.lang.String.<init>(String.java:593)

at com.adobe.flashaccess.server.license.configuration.commonsadapter.ScrambleUtil.unscramble (ScrambleUtil.java:51)

at com.adobe.flashaccess.server.license.configuration.commonsadapter.TenantConfigurationImpl $CryptographyImpl.readCredentials(TenantConfigurationImpl.java:583)

at com.adobe.flashaccess.server.license.configuration.commonsadapter.TenantConfigurationImpl $CryptographyImpl.<init>(TenantConfigurationImpl.java:516)

at com.adobe.flashaccess.server.license.configuration.commonsadapter.TenantConfigurationImpl .<init>(TenantConfigurationImpl.java:108)

at com.adobe.flashaccess.server.license.configuration.commonsadapter.CommonsConfigurationBas edFactory.getTenantConfiguration(CommonsConfigurationBasedFactory.java:89)

at com.adobe.flashaccess.server.license.configuration.cachedecorator.CacheDecoratorConfigura tionFactory$TenantConfigurationEntryFactory.getWrappedConfiguration(CacheDecoratorConfigur ationFactory.java:352)

at com.adobe.flashaccess.server.license.configuration.cachedecorator.CacheDecoratorConfigura tionFactory$BaseUpdatingCacheEntryFactory.createEntry(CacheDecoratorConfigurationFactory.j ava:315)

at net.sf.ehcache.constructs.blocking.SelfPopulatingCache.get(SelfPopulatingCache.java:71)

... 30 more

where is the wrong with it？

thx

cuichun

DRM Packaging and License Issuance Lifecycle/Workflow

forums_noreply@adobe.com — Fri, 24 Jan 2014 22:10:48 GMT

[ Purpose ]

The Adobe Access content lifecycle involves 3 primary phases:

Content Packaging
Client Device makes License Acquisition Request
License Server processes License Request and generates License Response
(Continuation of step 2) Client Device plays protected content

The purpose of this article is to familiarize you to the overall concepts of the Protected Content Life Cycle. As of Q1 2014, all of the key sizes and crypto mentioned below are accurate. However, due to the ever-evolving crypto landscape, any of the algorithms/crypto described below may change in Adobe Access DRM.

[ The Status Quo of other DRMs (like Widevine or PlayReady) ]

Most DRM systems make use of a central Key Management System (KMS) which contains all Content Encryption Keys (CEKs) for all content that has been protected by that DRM system. When the packaging system encrypts a piece of content, it queries the KMS in order to retrieve a suitable CEK to encrypt the content. Later, when a license server wishes to issue a DRM license to a client to play an encrypted content, the license server must query the same KMS in order to retrieve the correct CEK to insert into the DRM license. This workflow makes the KMS the lynchpin of the entire DRM system. The KMS has to be shared between the packager as well as the license server, and must be resilient to attack.

Adobe Access DRM, however, does not make use of a KMS. Adobe Access DRM encrypts the CEK with an asymmetric public key and embeds that encrypted CEK into the encrypted content's header metadata. The DRM license server has the asymmetric private key needed to decrypt the CEK out of the encrypted content metadata, which is then inserted into the DRM license that is issued to the requesting client.

***Access v5.2 Update: As of version AAXS 5.2, our DRM will now support the traditional model of using a KMS. We call this the "External CEK" feature, since the CEK is no longer encrypted and contained within the metadata - it is "external" to the content and stored in a KMS.

[ Certificates used in the Adobe Access DRM World ]

All certificates below utilize RSA-1024 public/private keypairs.

License Server Public Key: Content packager uses this pubKey to encrypt the Content Encryption Key (CEK). The encrypted CEK is embedded into the content's metadata.

License Server Private Key: License server uses this privKey to decrypt the CEK from the content metadata & return the CEK in a DRM license to the client.

>> Called "License Server" keys because these keys are the heart of your DRM server (and most valuable). This key is what protects the CEK of every content you protect with our DRM.

Transport Public Key: Packager inserts this pubKey into the content metadata. Client device trying to play the content will encrypt a license request with this key before sending the license request to the license server

Transport Private Key: License server uses this privKey to decrypt the license request sent to it by the client device.

>> Called "Transport" keys because they protect all of the messages that are being transported to the license server. Essentially an SSL-replacement.

Customer-specific Packager Public Key: (OPTIONAL) License server may decide to implement a packager whitelist, where it will only issue licenses for content that is packaged by specified packagers.

Customer-specific Packager Private Key: Packager uses this privKey to sign the content that it has packaged. This allows the license server to know who packaged the content.

>> Called "Packager" keys because this is how the packaging entity of a piece of Adobe Access DRM cotnent can be identified.

[ Content Packaging ]

There are several mechanism to create content that is protected via Adobe Access DRM:

Use the Adobe Access Java SDK (or the command line tools included with the SDK)
- Only F4V and FLV content can be created
Use a third-party encoder vendor
- E.g. A software or hardware product created by Harmonic, RGB, Cisco Inlet, etc...
- F4V/FLV content should be supported
- HDS content protected with Adobe Access DRM is supported by most vendors
- HLS content protected with Adobe Access DRM is either supported or on the roadmap of most vendors
Use an Adobe Primetime software packager (such as the Primetime Offline Packager)
- As of Primetime 1.2, only HLS is supported. The reason for this is that the Adobe Primetime player on all platforms (iOS, Android, Desktop) can all consume HLS content

During the packaging process, a single random AES-128 Content Encryption Key (CEK) is generated and used to encrypt the entire content data. Then the CEK is encrypted using the License Server Public Key, and then the encrypted blob is inserted into the protected content's metadata. In addition, further details/artifacts are inserted into the content metadata so that a device that wishes to play this protected content can acquire a DRM license. These additional details/artifacts are:

License Server URL
Transport Certificate (to encrypt the license request payload, since our protocol does not utilize SSL)
DRM policy

[ Client Device Makes License Acquisition Request ]

Before the client device (Desktop, iOS, Android, etc...) consumes the protected content, it must first acquire the necessary license from the Adobe Access license server that is associated with the content. This license server URL is found in the content metadata.

Irregardless of the target platform, the client application must use the DRMManager class to load the content metadata via a call to the loadVoucher() API. The different target platforms that support Adobe Access have different syntax, but the genreal idea is the same.

After instantiating the DRMManager class and calling its loadVoucher() function, Adobe Access DRM will automatically communicate with the license server to acquire a license. This process involves:

Create a license request and insert the DRM policy from the content metadata into it
Encrypt the license request using the License Server transport public key extracted from the content metadata
Retrieve the License Server URL from the content metadata & perform an HTTP/POST of the request to it
Attach the device's unique (individualized) public key to the request

[ Client Device Provisioning ]

If this is the first time the device is attempting to play content protected by Adobe Access DRM, the device must first "Individualize" itself by contacting an Adobe-hosted Individualization server. This operation happens automatically, behind the scenes, the very first time any DRMManager API is called. The entire transaction is invisible to the application developer if successful. If there is any problem during the indiv process, a DRMErrorEvent 3321 [Indiv Failed] will be thrown.

Provision a unique public/private key pair for the device
Set up a secure store on disk for licenses

[ License Server Processes License Request and Generates License Response ]

The workflow below covers what the Adobe Access Reference Implementation License Server Java servlet does.

License Server receives license request & forwards request to the LicenseRequestHandler class to parse the request
1. Adobe Access SDK uses the Transport Private Key to decrypt the license request
2. (OPTIONAL) This Transport Private Key can be protected by storing it on a Hardware Security Module (HSM)
(OPTIONAL) License server may choose to inspect who packaged the content by performing a signature validation using the Packager Public Key. This allows the server to configure a whitelist of what content to issue licenses to, and which content to ignore, based on who packaged the content.
1. It is important to note that the Reference Implementation license server does not contain this packager whitelisting logic. However, the Adobe Access License Server for Protected Streaming does.
License Server inspects the DRM policies contained in the license request & selects the appropriate DRM policy to use by calling LicenseRequest.setPolicy()
1. Optionally, the license server may choose to modify the policy's rights, or even completely ignore the policy and use another policy it chooses
License Server calls the LicenseRequest.generateLicense() to generate a DRM license that can only be consumed by the requesting client device
1. Adobe Access SDK uses the License Server Private Key to decrypt the CEK out of the license request and then insert the CEK into a license that is encrypted using a key that only the client device can decrypt. It is important to note that the CEK is not stored in a Content Key Management system. The license server needs no database to handle the license request. The CEK is contained within the license request itself (which was encrypted and inserted into the content metadata by the packager). This is conceptually very different from most other competing DRM systems on the market.
2. (OPTIONAL) This License Server Private Key can be protected by storing it on a Hardware Security Module (HSM)
License Server encrypts the License Response using the Device's public key (which was sent up to the license server with the License Request) and sends the encrypted response back to the client device.
On the device, the device uses the Device's Private Key to decrypt the license, which contains the Content Encryption Key (CEK) and uses it to decrypt the Adobe Access protected content.

[ OPTIONAL - iOS Remote Keyserver ]

Note: Adobe Access DRM on iOS (aka Primetime DRM) is only available to Adobe Primetime licensees.

In addition to the workflow above, iOS devices have the additional ability to use a remote Key Server, which issues the AES key (over SSL) needed to decrypt the content. Doing this introduces 1 more network request to the AES Key Server, after the traditional call to the Adobe Access DRM license server. This workflow is required if the content is packaged with a DRM policy that has set the property "server.requireKeyServer=true". The HTTP/GET request sent to the key server contains a URL query parameter containing the encrypted AES key. The Key Server (which must be an Adobe Access Keyserver) has a private key to decrypt the AES key from the HTTP/GET request and sends down the key. This flow is illustrated below.

For customers who want a more performant approach, it is possible to remove the need to reach out (over the internet) to a remote AES Key Server. If the content is packaged with a DRM policy that does not specify a remote key server is needed, the video player will perform a local AES key lookup (by going to 127.0.0.1 to fetch the key, instead of a remote key server).

cheers,

/Eric.

What is the Adobe Access DRM (version 5.2) "External CEK" feature?

forums_noreply@adobe.com — Wed, 28 May 2014 17:07:57 GMT

[ Prior to Access 5.2 ]

The randomly-generated (or user-provided) Content Encryption Key is encrypted using an asymmetric "license server key" and then stored in the content's metadata. The CEK is never required to be persisted anywhere else (like a Key Management system or secure database). When a client device makes a license request, the content metadata is sent to the Access DRM License Server, which has the private asymmetric key needed to decrypt the CEK out of the metadata. The license server can then issue a license to the client containing this CEK. For more details on the entire workflow, please see this post: DRM Packaging and License Issuance Lifecycle/Workflow

[ New Feature introduced in Access DRM 5.2 - External CEK ]

Due to popular demand, version 5.2 of Access DRM introduced a new Key Retrieval scheme called "External CEK". The reason this name was chosen is because the CEK is now external from the metadata (where it traditionally resided). Instead of the encrypted CEK being stored in the content metadata, a CEK-ID is stored there instead. When the license server is processing a license request, if it detects that the KeyRetrievalType of the request is of type "ExternalKeyRetrieval", then the license server must implement logic to do a retrieval of the CEK, which is specific to the company using Access DRM. The key retrieval may be via a KeyManagementService, a SecureDatabase, or even something as simple as a locally-stored flat file (hopefully only for testing purposes).

Using internal-CEK or external-CEK is transparent to the client device; no code has to change (or has to change if you're upgrading from an earlier version of Access). The only changes needed to incorporate External-CEK into your Access DRM workflow is to make a change on the content packaging side (to enable E-CEK and specify the CEK-ID), and on the license server side (to recognize the KeyRetrieval type as E-CEK and then do a CEK fetch).

Details on how to integrate the External-CEK workflow into your Adobe Access DRM infrastructure is included in your Adobe Access v5.2 documentation and DVD.

cheers,

/Eric.

renewing Flash Access Certs when a HSM is used

forums_noreply@adobe.com — Wed, 23 Apr 2014 08:48:47 GMT

our operations team came across a potential problem in the process of renewing Flash Access certs for

When a HSM is not used: old certs are referenced in the FA config file so that they can be used to decrypt content that has been encrypted with the old certs. We have done this in the past and works fine.

When a HSM IS used: the FA config file needs to be able to reference old certs stored on the HSM. It looks like the FA application is unable to do this. It is not possible to remove the private key from the HSM and so it is not an option to store the old certs locally on the license server (not that we would want to do that anyway).

I’m not sure if it’s an option to point FA to the HSM to look for the certs. Any ideas how this can be done?

thanks

Can I use MachineID.getBytes() or MachineID.getUniqueID() as a unique identifier?

forums_noreply@adobe.com — Mon, 08 Jul 2013 16:44:25 GMT

The bytes from MachineID.getBytes() are not to be treated as a unique identifier for a device. It is unique, but is volatile and not suitable to be used as an identifier. There are various system/hardware events which can cause the MachineID bytes to change over time. The same rule applies to MachineID.getUniqueID(). If you do .getBytes() and then compare that to AnotherMachineID.getBytes(), even though they can be the same device (but different runtime or browser), you will get a "false" if you're doing a direct byte-by-byte comparison. This is because during the device individualization process, the device's hardware attributes are interrogated to get a hardware "fingerprint" of the device. This is stored as a data structure in the MachineID data structure.

The only resilient way (with limtiations, as stated in the next section) to compare to different devices to determine if they are the same device is to use MachineID.matches(). That comparison is resilient against machine hardware upgrades (changing hard drives, upgrading your video card, upgrading your CPU, reformatting your machine, changing user accounts, using different browsers, etc…).

(NOTE): There are 2 known limitations to using MachineID.matches():

1. MachineID in the Chrome browser (on any platform) a randomly-generated ID string that is not tied to the hardware. The reason for this is that with the release of Chrome Version 28 browser introduced a sandbox, where code in the browser is not allowed to communicate directly with the hardware layer. This will cause .matches() to fail if comparing a MachineID from Chrome against a MachineID from Firefox, even from the same machine. This also means that if a user "resets Adobe Access DRM/Licenses", they will lose their ID, and it will be re-generated (as a new ID) the next time DRM content is consumed and their machine has to create a new MachineID.

2. A similar limitation applies to iOS devices running iOS7 and higher, as a sandbox was also introduced to that platform, preventing applications from directly accessing the hardware. If you are using iOS7 with a the Primetime Player SDK (PSDK) 1.0 or 1.1, the MachineID for all devices will be the same value, as Apple blocked the device-access APIs (which Adobe Access uses) and caused them to return a static string. Since all iOS7 devices will return the same string when the device hardware interrogation happens, all iOS7 devices using the the PSDK 1.1 or earlier will return true when MachineID.matches() is called. Adobe is working on a high-priority fix to this issue, which will be released in a PSDK 1.1 patch/hotfix, where another persistent API is used to bind the MachineID to the device, instead of the blocked device-access APIs. This new binding mechanism will be persistent across application uninstall/re-installs.

What is consistent between iOS7 and Chrome 28 (and higher), is that the MachineID will no longer be tied to the hardware attributes of the device.

cheers,

/Eric.

Chrome 29 (and later) - When does my MachineID change?

forums_noreply@adobe.com — Wed, 18 Sep 2013 01:12:21 GMT

[ Background ]

The first time a device ever attempts to consume Adobe Access DRM content, it must first "individualize". This is the process by which the device will communicate with an Adobe Access "Individualization" server to create an individual & unique identity for itself. One of the most important steps during individualization is the creation of a "MachineID", which is a data structure containing an UniqueID as well as a list of hardware attributes of the device. Since the MachineID contained a list of hardware attributes available on the device , this allowed for a very powerful ability:

* The ability to "match" 2 devices and determine if they were the same device by using MachineID.matches(). This is because the MachineID data structure contained a list of device attributes that would be compared against another MachineID object.

* In addition to .matches(), there was also MachineID.getUniqueID(), which returns the unique GUID associated with the MachineID that was created during individualization.

[ Impact from Chrome 29 ]

Beginning with Chrome 29, Google introduced a sandbox which prevented direct access to the device's hardware. As a result, during the Individualization process, when the MachineID of a device is created, it is completed without any knowledge of the device's hardware. A direct result of this is that:

* On Chrome 29 and later, MachineID.matches() can no longer be used to compare 2 MachineIDs to determine if they are the same device.

* On Chrome 29 and later, MachineID.matches() between 2 different devices will likely return "true", since the list of hardware attributes is "0", which is what is returned by Chrome 29 and later.

If you had previously used MachineID.matches() to perform server-side business logic, such as machine-counting of users, that logic may no longer hold completely true on Chrome 29 and later. This is because all MachineID.matches() will likely return "true".

However, if you are using MachineID.getUniqueID, these GUIDs will always be guaranteed to be unique. However, there are some limitations to using .getUniqueID().

* A different MachineID is created for each browser and user account on the machine, since each one of these are considered different DRM namespaces.

* If Adobe Access is reset/erased on a machine, the machine will re-individualize, creating a new MachineID (with a new .getUniqueID()).

It is important to note these limitations before using these APIs for purposes such as machine identification or counting in conjunction with the Chrome browser.

[ Operations Affecting MachineID ]

Some situations can reset your MachineID:

* Reformatting your hard drive

* Deleting the Flash Player caches manually from your computer

* Performing a Chrome browser reset with "deauthorize content licenses" checked

* Uninstalling Chrome browser with "delete all personal data" selected

cheers,

/Eric.

Can I use Adobe Access as HTTP license server/key generator?

forums_noreply@adobe.com — Wed, 23 Apr 2014 08:25:32 GMT

I'm looking for an HTTP API for key/keyID generation and retrieval.

I have a server that stores the content, and I'm doing HLS/HDS encryption and packaging on my own.

Can Adobe Access be used as license server for my packager and licaense acuistion server for clients playing the encrypted content?

Thanks.

Looking to speak to Adobe Sales about Primetime

forums_noreply@adobe.com — Fri, 28 Mar 2014 12:30:23 GMT

I have spoken on the phone to many people at Adobe who have never heard of Primetime. It is very frustrating.

We currently have a license for Adobe Access and would like to get the Primetime Player SDK's. Can someone contact me about obtaining these SDK's.

Thanks.

Problems with Hasher.bat (SWF Whitelisting)

forums_noreply@adobe.com — Fri, 28 Feb 2014 23:40:07 GMT

Hi,

I have been investigating an issue with a customer no longer being able to generate a SWF hash for whitelisting.

I have traced it to _how_ I build the SWF.

If I build the SWF with Flash Builder 4.6, Hasher.bat works perfectly. If I import the exact same code project into Flash Builder 4.7, Hasher.bat fails with an error. (See below.)

Obviously, I want to submit a bug report somewhere, but I can't find the appropriate bugbase so to do.

Please can somebody direct me?

Thanks,

E:\AdobeAccessSDK_4_0_LS1_java\Adobe Access Server for Protected Streaming>Hasher.bat http://server.local/flexdev/faswf/Pl

ayerSpriteGeneratedWithFlashBuilder46.swf

Parameter type: URL. (Retrieving hash...)

SWF Hash: 2ElI68N9CgxG74akZerB2KxCy/hyDIkyLnph2Nn8Svc=

E:\AdobeAccessSDK_4_0_LS1_java\Adobe Access Server for Protected Streaming>Hasher.bat http://server.local/flexdev/faswf/Sa

meThingGeneratedWithFlashBuilder47.swf

Parameter type: URL. (Retrieving hash...)

java.io.IOException: Invalid SWF file specified

Usage:

Hasher <SWFFilePath>

Problem with custom Authentication Token

forums_noreply@adobe.com — Tue, 17 Jan 2012 15:11:33 GMT

Hello,

I'm trying to use custom authentication token, but i don't manage to get the OSMF based player to send the token to the server.

I will describe the whole process that we use to achieve this.

the java code to create the policy for custom authentication:

import com.adobe.flashaccess.sdk.policy.LicenseServerInfo;
import com.adobe.flashaccess.sdk.policy.Policy;
import com.adobe.flashaccess.sdk.policy.PolicyException;
import com.adobe.flashaccess.sdk.policy.ServerInfo.AuthenticationType;
import com.adobe.flashaccess.sdk.rights.PlayRight;
import com.adobe.flashaccess.sdk.rights.Right;

import java.io.FileOutputStream;
import java.io.IOException;
import java.text.ParseException;
import java.text.SimpleDateFormat;
import java.util.ArrayList;
import java.util.List;

public class CreatePolicy
{
    public static void main(String[] args) {
        Policy policy = new Policy(false);
        policy.setName("custom_policy");
        policy.setLicenseServerInfo(new LicenseServerInfo(AuthenticationType.Custom));

    PlayRight play = new PlayRight();
    List<Right> rightsList = new ArrayList<Right>();
    rightsList.add(play);
        policy.setRights(rightsList);

        try
        {
            // Serialize the policy                                                                                                                                                                                                                                                                                                                                                                                                      
            byte[] policyBytes = policy.getBytes();
            System.out.println("Created policy with ID: " + policy.getId());
            // Write policy to a file.  Alternatively, the policy could be stored in a database.                                                                                                                                                                                                                                                                                                                                         
            FileOutputStream out = new FileOutputStream("custom.pol");
            out.write(policyBytes);
            out.close();
        } catch (PolicyException e) {
            // The policy could not be created, because required fields were not set.                                                                                                                                                                                                                                                                                                                                                    
            e.printStackTrace();
        } catch (IOException e) {
            // Error writing policy to file                                                                                                                                                                                                                                                                                                                                                                                              
            e.printStackTrace();
        }
    }
}

Here is the output of Adobe Policy Manager for this policy:

Adobe(R) Flash Access Policy Manager
version 2.0.2.0061
=======================
Policy Report:
=============

Policy ID: 2B765152-4833-3E5E-8C78-B2488E4C987C
Policy Name: custom_policy
Revision: 1

License Server Authentication: custom

Unlimited License Caching

Right: Play

Then we modify this policy to add some metadata and use it to package a standard mp4 file.

Here is the output of Adobe(R) Flash Access Media Packager for this packaged mp4 file:

Adobe(R) Flash Access Media Packager
version 2.0.2.0061
=======================
Source file: mp4_h264_aac_fa2-1326491966.mp4
License Server: http://lic.dev.int.secret.net
License ID: 9EC8E136-9D2D-3D12-B042-7EC97212C1D3
Content ID: 4e6f6bbddede83536f000000.4f10b739dede83376c000000
Packager: CN=MyCorp-PKG-20111123,OU=Adobe Flash Access,OU=Packager,O=Adobe Systems Incorporated,C=US
Packaging time: Fri Jan 13 23:59:25 CET 2012
Policies:


Policy ID: 2B765152-4833-3E5E-8C78-B2488E4C987C
Policy Name: custom_policy
Revision: 2

License Server Authentication: custom

License Caching Duration: 1440 minutes (1 day)

Right: Application Defined Right
    media_id =
        4f10b739dede83376c000000
    user_id =
        4e6f6bbddede83536f000000
Right: Play

CustomProperties: 
    media_id =
        4f10b739dede83376c000000
    user_id =
        4e6f6bbddede83536f000000


SUCCESS

The file is stored on a standard HTTP server.

Here is the code of the OSMF 1.6 based video player:

package
{
     import flash.display.Sprite;
     import flash.utils.ByteArray;

     import org.osmf.events.MediaPlayerStateChangeEvent;
     import org.osmf.media.DefaultMediaFactory;
     import org.osmf.media.MediaElement;
     import org.osmf.media.MediaPlayerSprite;
     import org.osmf.media.MediaPlayerState;
     import org.osmf.media.MediaResourceBase;
     import org.osmf.media.URLResource;
     import org.osmf.metadata.MetadataNamespaces;
     import org.osmf.net.StreamingURLResource;
     import org.osmf.traits.DRMTrait;
     import org.osmf.traits.MediaTraitType;
     import org.osmf.events.DRMEvent;
     import org.osmf.traits.DRMState;

     public class MyPlayer extends Sprite
     {
          private var protectedMP4:String = "http://secret.net/mp4_h264_aac_fa2-1326491966.mp4";
          private var player:MediaPlayerSprite = null;
          private var streamingResource:StreamingURLResource = null;

          public function MyPlayer()
          {
               var factory:DefaultMediaFactory = new DefaultMediaFactory();
               streamingResource = new StreamingURLResource(protectedMP4);
               var mediaElement:MediaElement = factory.createMediaElement(streamingResource);

               player = new MediaPlayerSprite();
               addChild(player);
               player.mediaPlayer.addEventListener(DRMEvent.DRM_STATE_CHANGE, this.onDRMStateChange);

               player.mediaPlayer.autoPlay = true;
               player.mediaPlayer.media = mediaElement;
          }

          protected function onDRMStateChange(event : DRMEvent) : void
          {
                trace('onDRMStateChange ' + event.drmState);
                if (event.drmState == DRMState.AUTHENTICATING)
                {
                    //player.mediaPlayer.authenticateWithToken("token");
                    var drmTrait:DRMTrait = player.mediaPlayer.media.getTrait(MediaTraitType.DRM) as DRMTrait;
                    drmTrait.authenticateWithToken("token");
                }
          }

     }
}

This code is heavily based on code found in another forum thread about custom token and OSMF

the problem is that we don t really know when to use authenticateWithToken() if we call it on the DRMState.AUTHENTICATING event it will loop and stack overflow because calling authenticateWithToken will trigger the AUTHENTICATING event so it will loop until it will stack overflow.

I also tried to call it in AUTHENCATION_NEEDED (i had to modify to server code to return this event) but then custom Token is never recieved by the server.

For completness here is the part of the server code where i'd like to retrieve the raw authentication token, this code is heavily based on the reference implementation


LicenseHandler licenseHandler = null;


try {


ServletInputStream in = request.getInputStream();


ServletOutputStream out = response.getOutputStream();


HandlerConfiguration context = getHandlerContext();


ServerCredential licenseServerCred = getLicenseParams().getLicenseServerCred();


licenseHandler = new LicenseHandler(context, in, out, licenseServerCred);


licenseHandler.parseRequest();


List<? extends LicenseRequestMessage> requests = licenseHandler.getRequests();


// Multiple request in one message is not supported in FAXS 2.0 client.                                                                                                                                                                                                                                                                                                                                                  




for (LicenseRequestMessage licenseReq : requests)


{


try {


if (licenseReq.getRawAuthenticationToken() != null)


{


LOG.info("We have a auth token");


LOG.info(licenseReq.getAuthenticationToken());


}


else


{


LOG.info("No auth token :(");


licenseReq.setErrorData(AdobeErrorData.LACQ_AUTHENTICATION_REQUIRED);


}




V2ContentMetaData metadata = licenseReq.getContentInfo().getContentMetadata();


ApplicationProperties applicationProperties = null;


String usageModelString = null;


if (metadata != null)


{


applicationProperties = metadata.getCustomProperties();


if (applicationProperties != null)


{


//usageModelString = applicationProperties.getSingleValueAsUTF8String(DEMOMODE);                                                                                                                                                                                                                                                                                                                         




}


}


License license = null;


license = generateLicense(licenseReq);




// If desired, modify the expiration or rights in the license                                                                                                                                                                                                                                                                                                                                                    




if (license != null)


{


logLicenseInformation(license);


} else {


// No license and no error set.                                                                                                                                                                                                                                                                                                                                                                              




LOG.error("Unknown error while generating license");


licenseReq.setErrorData(AdobeErrorData.SERVER_ERROR);


}

licenseReq.getRawAuthenticationToken() always return null, and i checked in the log that this is the good policy that we recieve as the policy id is the same.

What are we doing wrong?

Thanx

Adobe Access Protection on iOS devices?

forums_noreply@adobe.com — Wed, 12 Feb 2014 21:20:56 GMT

I am having an issue in terms of Adobe Access not supported in iOS. I have been developing a custom player along with a bunch of other back end Adobe Technologies only to find out now that protection is not available in iOS.

DRMManager.isSupported returns false when we test the app in iOS Simulator. DRMManager.isSupported returns true when we use Air Simulator.

I am using OS X 10.9, AIR SDK 4.0, Apache Flex 4.11.0, and Xcode 5.02, and Flash Builder 4.7.

This is a huge problem and amounts to false advertisement because the protection is supposed to be handled by Adobe AIR which is supposed to be uniform across platforms. If protection is not supported on iOS, then the appeal of write one code for multiple platforms is not there any more.

I don't understand why protection is not uniformly supported if the same Adobe Air is installed on both iOS and Android devices. I also don't understand why HDS is supported on Android but not on iOS devices. It makes no sense. The whole reason for using Adobe AIR is to not have to deal with the specifics of each platform.

We were supposed to go live on Jan 1st, but had to postpone to deal with several issues. Now it seems that we may have to reevaluate the decision to use Adobe technologies altogether.

Any suggestions from Adobe would be appreciated.

How to fix "DRM Error 3321" withouting connecting PC to internet?

forums_noreply@adobe.com — Tue, 25 Mar 2014 13:23:37 GMT

How to fix "DRM Error 3321" withouting connecting PC to internet?

Currently, we are encountering "DRM Error 3321" because our PCs/Notebooks do NOT have connection to internet for “http://individualization.adobe.com”. Thoese PCs are in isolated network and can NOT connect to internet.

Is there a way to solve this issue without connecting their PCs/Notebooks to internet?

Thank in advance.

Adobe Access on iOS.

forums_noreply@adobe.com — Mon, 24 Mar 2014 16:41:35 GMT

This discussion is a follow up of my previous discussion that can be found at http://forums.adobe.com/message/6174242. I am starting a new discussion for clarity.

The previous discussion addressed the question of whether Adobe Access DRM and its variant PHLS are available on iOS. The answer is NO, Unless You Sign UP for Adobe Primetime.

You have to sign up for Adobe Primetime to get the iOS Primetime Player SDK which includes the Adobe Access iOS APIs needed to stream PHLS in a native iOS app.

The Adobe Primetime platform requires a large monthly commitment, so that means that for all practical purposes Adobe Access DRM and PHLS is available only to a small number of companies.

The Adobe Access iOS API used to be part of the Adobe Access SDK but at some point was removed from the SDK.

The Adobe Access website (http://www.adobe.com/products/adobe-access.html) continues to market Adobe Access as follows:

“Publish and protect video streams carrying studio-grade content to desktops, connected TVs, tablets, and smartphones, including iOS and Android devices, using a single DRM platform”.

After talking to several Adobe folks, the picture that is emerging is one of bait and switch. It is clear that at some point, Adobe decided to remove the Adobe Access iOS API from the Adobe Access SDK and make the iOS API part of the Adobe Primetime iOS SDK. This is a fact. The question is why?

Only Adobe can answer that question, but it is safe to assume that this was a strategic decision. By removing the iOS API from the Adobe Access SDK, companies that want to deliver protected content to iOS devices have to sign up for Adobe Primetime.

Adobe seems to have gone to some length to implement this strategic decision.

It did not update the publicly available OSMF 2 to be able to consume Adobe Access protected HLS streams. Development of OSMF 2 was stopped in 2010.
It removed support of DRMManager class and Netstream class members (required for DRM) from AIR for iOS.
It removed the Adobe Access iOS API from the Adobe Access SDK. I am not sure when this was done, but the Adobe SDK sent to me last August does not include the iOS API.
Adobe has not published any documentation on how Adobe Access DRM for HLS is implemented.

The deception consists in the fact that Adobe is still marketing Adobe Access in a way that makes you believe that Adobe Access DRM is available on iOS devices. This is false.

Purchasing Adobe Access alone is not enough to protect content on iOS devices. The Adobe Access SDK does not include the iOS API.

The question is then why does Adobe continue to promote such deception.

Again, this has to be a strategic decision….a classical example of bait and switch. Who in the right mind would develop around a half-baked product from the get go knowing that they would not be able to deliver protected content on iOS devices.

The Adobe Access team has admitted that Adobe Access DRM and its variant PHLS are only available through Adobe Primetime iOS Player but the Adobe Access site continues to make false claims. This is deception.

Of course, Adobe knows that by declaring no support for iOS, Adobe Access and Adobe Media server sales would be in danger. But that is the right thing to do both morally and legally.

In my scenario the only right action is for Adobe to provide the Adobe Access iOS API. It’s too late for Adobe to say oops sorry. I have already agreements with content owners which specify Adobe Access as the protection scheme. All the encoding and packaging is based on Adobe Access and it’s variant PHLS. If Adobe does not provide the iOS API, I will be forced to seek the appropriate legal action.

Should custom authentication token be getting cached?

forums_noreply@adobe.com — Tue, 18 Mar 2014 15:17:47 GMT

I am setting a custom authentication token on the DRMTrait, which is working fine. The only issue OSMF/Flash Player seems to be sending license requests with the old (expired) token from a previous session of playback. If I navigate away from my player page and then back, I retrieve a new token via JavaScript and pass it in as a FlashVar. I can see in my logging to the console from the Flash Player that this is a new unique token, however, the server shows it is still receiving the old token from the previous session. I had assumed setting FORCE_REFRESH would prevent this but the more I think about it, this simply insists on going to the server for the voucher.... but doesn't force it to use the token I set.

I don't have the code in front of me at the moment, but with this level of detail does anyone have any ideas as to why the custom token is being held on to?

Thanks.

Flash DRM support on Linux without hal

forums_noreply@adobe.com — Mon, 23 Jul 2012 19:26:35 GMT

Hello.

I'm maintainer of Fedora Linux and want find way see DRM protected content on it.

As most people known HAL is deprecated and was removed from Fedora - https://fedoraproject.org/wiki/Features/HalRemoval and will from other distributions - Ubuntu - https://wiki.ubuntu.com/Halsectomy, Debian - http://wiki.debian.org/HALRemoval

As I need access to such content I'm wondering how I can do it without hal ressurection? I had googled, but found nothing usefull.

Android and iOS Output protection.

forums_noreply@adobe.com — Fri, 14 Mar 2014 00:04:13 GMT

Output Protection: Control whether output to external rendering devices is permitted.

[Background]

Controls whether output to external rendering devices should be restricted. An external device is defined as any video or audio device that is not embedded in the computer. The list of external devices excludes integrated displays, such as in notebook computers. Analog and digital output restrictions can be specified independently.The following options/levels of enforcement are available:

Defenitions for Analog Interfaces:

Defenitions for Digital Interfaces:

The behavior on Android is is split a the 4.0 release of the operating system:

Apple iOS has the following behavior:

Adobe Access Pro trial and iOS samples

forums_noreply@adobe.com — Thu, 13 Mar 2014 04:02:34 GMT

I signed up for Adobe Access trial, downloaded and unpacked Adobe Access Pro 4. According to this document:

http://www.adobe.com/support/adobeaccess/pdfs/client/ios_readme.pdf

there should be iOS video player sample at Reference Implementation\Sample Video Players\iOS. But I can only see there samples for Desktop and Android, nothing for iOS. What am I missing and where to find sample player for iOS?

Tried to talk/chat with LWS CSRs, they have no idea what I'm talking about. Anybody knowledgeable here to shine the guiding light for me?

Thank you.

Adobe Access License Flow on iOS using Primetime Player (PSDK)

forums_noreply@adobe.com — Wed, 12 Mar 2014 21:59:56 GMT

[ Background ]

Adobe Primetime allows DRM-protected HLS (and soon, DASH) streaming to all platforms that Video Broadcasters want to hit - Desktop computers, Mobile Devices (iOS & Android), Set Top Boxes, Smart TV's, etc...

How does license acquisition & playback happen in the iOS environment when using Adobe Access DRM in conjunction with Adobe Primetime Media Player SDK (PSDK)?

[ Answer ]

Adobe Access traditionally provides a Java SDK that can be used to build a license server. This license server can issue Adobe Access DRM licenses to all platforms that can consume Adobe Access protected content.

In addition to the license server, the iOS platform (and only the iOS platform) supports an additional server called the HLS key server. This is an HTTP server that provides AES keys to the client when it is attempting to decrypt a .ts segment referenced in an .m3u8 playlist. This (remote) key server is only supported for the iOS use case, because it is the traditional model for protecting HLS content streamed to iOS devices. When Adobe implemented support for HLS playback on non-iOS platforms, Adobe removed the requirement of a (remote) key server. The .m3u8 manifest still contains references for key server URI's, but those URI's point to local-host, where there is a local HTTP server running that can feed the necessary AES keys to the video player.

[ Detailed Workflow ]

Here’s the iOS workflow when the Adobe Access DRM policy has the setting policy.requireKeyServer=true.

This ONLY applies to iOS, since there is no concept of key server for any other target that we can stream HLS to (e.g. Android, Desktop, set-top-boxes, TVs, etc…)

After packaging HLS content to use Adobe Access DRM, the resultant m3u8 file is not directly consumable - it is an invalid m3u8. It must first be processed by the Primetime Player SDK (PSDK)
The iOS App (built using the PSDK) detects that the HLS content is protected with Adobe Access DRM and:
1. Requests a license from an Adobe Access license server (using the DRMManager API)
2. Updates/Rewrites the m3u8 into a form that can be ingested by Apple’s AVPlayer subsystem
  1. (if the DRM policy has policy.requireKeyServer=true), all of the keyserver URI's in the m3u8 are updated to add a URL query parameter which includes an encrypted KeyToken containing the content AES key. Only the Adobe Key Server can decrypt this KeyToken and return the content AES key.
  2. (if the DRM policy has policy.requireKeyServer=false), all of the keyserver URI's in the m3u8 point to localhost. The PSDK runs its own lightweight HTTP server that will return the content AES key.
The iOS App then initiates a “play” operation by passing the .m3u8 file to the Apple AVPlayer
As per the HLS spec, when AVPlayer plays the .m3u8 as normal
On encountering a key server URL in the m3u8, key server will reach out to the server endpoint to get the AES key needed to decrypt the following segments
1. If .requireKeyServer=true, the key will be requested from the designated Adobe Access Keyserver over SSL
2. If .requireKeyServer=false, the iOS App will request the key from a local key server that is embedded into the Primetime PSDK (instead of reaching out over the internet)

cheers,

/Eric.

supported video formats in DRM protected files (ACS4)

forums_noreply@adobe.com — Thu, 06 Mar 2014 14:19:28 GMT

Which video formats can be included in EPUB-files, protected by ACS4 (and also "decoded" at afterwards in ADE)?

Is the restriction of file formats on the side of ACS or ADE?

Are there any changes expected with ACS5/ ADE3.0?

Thank you in advance.

Having trouble with Single Sign On using Pay-TV Pass

forums_noreply@adobe.com — Wed, 05 Mar 2014 00:04:11 GMT

I'm using Comcast TV Go app and signed on to my account, but when I launch the CNN app, I still need to sign on.

I thought Pay-TV Pass was supposed to save me from having to sign on to each app that uses Pay-TV Pass.

Any thoughts?

PS. Comcast's TV Go app on iOS *does* use Pay-TV Pass, doesn't it?

Deploy new certificates

forums_noreply@adobe.com — Fri, 28 Feb 2014 17:41:33 GMT

Hi, I'm from Mexico city

I have Flash access server deployed in my server, we need deploy new certificates, the older certificates were deployed by a provider, they don't left documentation about the deploy. I followed the documentation, I created the CSR certiticates and Adobe send me the license, transport and packager certificates, the question is:

-How can I deploy the new certificates, is needed replace only the files or is a step-by-step document

My infrastructure use harmonic encoders and scramblers.

Thanks.

Adobe Community : All Content - Adobe Access DRM / Primetime DRM

cannot inport photos

IphoneをPCに接続すると「Elements Organizer」が立ち上がる 立ち上がらない方法

Pre-Elementsを立ち上げると「互換性のないディスプレイドライバーが検出されました。…ドライバーを更新してください」と表示されます。更新する方法を教えてください

Flash update?

How to I now repair adobe authorization for cs3?

disabled Adobe Flash Player by mistake.

Ereader Kobo doesn't recognize drm

DRM protected books

I am trying to convert pdf to word, when I click convert, it sends me back to the subscription page, which I just completed

ERROR 100

reset drm licenses on devices

Premiere version for windows XP - How can I dounload one ?

Failed to start flashaccess packager

DRM Error 3321 Causes & Resolution

E_AUTH_BAD_SERVER_RESPONSE

DRM fails to authorize device although log in details are correct

Hello, how can I protect my PDF document (electronic book written by me) from copying?

Why is Firefox not finding Flash Player Plugin on Centos

Adobe Access - new drmNativeInterface.framework for iOS 8

DRM Error: 3305[ServerConnectionFailed] and Error loading metadata file:Error #2048

Request for Access DRM (license transport packager ) certificate, no reply.

Flash access support on linux (ubuntu)

DRM error 3370?

Where is PPAPI plug-in?

Difference between getUniqueID() and getBytes() of class MachineID?

Adobe AIR 14 video player app : windows 8+, Mac OS 10.8 &10.9, android 4+ not mentioned in Access tech specs

E_AUTH_BAD_DEVICE_KEY error

E_AUTH_BAD_DEVICE_KEY error

DRMManager not throwing DRMErrorEvent when digital output is blocked

How to Use Adobe For TV Stream

Error with Verifying tenant 'flashaccessserver/sampletenant'.

DRM Packaging and License Issuance Lifecycle/Workflow

What is the Adobe Access DRM (version 5.2) "External CEK" feature?

renewing Flash Access Certs when a HSM is used

Can I use MachineID.getBytes() or MachineID.getUniqueID() as a unique identifier?

Chrome 29 (and later) - When does my MachineID change?

Can I use Adobe Access as HTTP license server/key generator?

Looking to speak to Adobe Sales about Primetime

Problems with Hasher.bat (SWF Whitelisting)

Problem with custom Authentication Token

Adobe Access Protection on iOS devices?

How to fix "DRM Error 3321" withouting connecting PC to internet?

Adobe Access on iOS.

Should custom authentication token be getting cached?

Flash DRM support on Linux without hal

Android and iOS Output protection.

Adobe Access Pro trial and iOS samples

Adobe Access License Flow on iOS using Primetime Player (PSDK)

supported video formats in DRM protected files (ACS4)

Having trouble with Single Sign On using Pay-TV Pass

Deploy new certificates

IphoneをPCに接続すると「Elements Organizer」が立ち上がる　立ち上がらない方法