Broadpeak BKS integration
The purpose of this document is to provide information on integrating Broadpeak's BKS packager with Insys Cloud DRM service.
The Cloud DRM service supports CPIX, which is used to obtain the keys required for encrypting content using Broadpeak's BKS packager.
Configuration
Broadpeak's BKS packager utilizes the Broadpeak CPIX interface based on the DASH-IF Implementation Guidelines (https://dashif-documents.azurewebsites.net/Cpix/master/Cpix.html). Depending on the DRM provider, the packager automatically selects the proper systemId from a supported list:
| System | systemId | Streaming protocol |
|---|---|---|
| Microsoft PlayReady | 9a04f079-9840-4286-ab92-e65be0885f95 | Microsoft Smooth Streaming and MPEG-DASH Streaming |
| Google Widevine | edef8ba9-79d6-4ace-a3c8-27dcd51d21ed | MPEG-DASH Streaming |
| Apple Fairplay | 94ce86fb-07ff-4f43-adb8-93d2fa968ca2 | HLS Streaming |
Output configuration
To configure DRM settings for a live service, navigate to the Outputs tab and select the Encryption Settings section. Depending on the output type, specific settings must be provided.
To configure your settings, you will need specific parameters and addresses. These can be found in the Cloud Video Kit web console. Once you're there, select the Configuration page in the DRM module from the side menu. The parameters you need are located in the KMS tab.
DASH
- Encryption type - Select CPIX
- Add DRM to mpd - Checked (enables adding DRM information to DASH manifest)
- DRM providers - Select one of the following (depends on the workflow) PlayReady, Widevine, Widevine & PlayReady, Custom DRM, Custom DRM & PlayReady, Custom DRM & Widevine, Custom DRM & Widevine & PlayReady
- Key server url - CPIX URL from API section at Cloud Video Kit web console
- Key server login - Login from Authentication section at Cloud Video Kit web console
- Key server password - Password from Authentication section at Cloud Video Kit web console
🔍If you can't find Login and Password parameters in Authentication section, your tenant may have BasicAuth authentication turned off. Please contact Insys to add this authentication method for you.
- Content id - Asset identifier - any unique value (e.g. GUID)
- Storage mode - File or Database
☑️ Checkbox additional settings
Click to expand additional settings
Manually define key id ☑️ - Enables defining fixed keyId
Manual key id settings: - Key id - id of key in hex
CPIX document protection ☑️ - Enables signing CPIX document with certificate Not supported by Insys Cloud DRM ❗
Enable key rotation ☑️ - Enables key rotation
Key rotation settings:
- Crypto period - Desired crypto period time
- Crypto Period Offset - Crypto period offset to modify period alignment (0 means crypto period is aligned on 0 epoch time)
- Index based content key period - Enables using numerical index for the key period instead of start-end dates
Enable multi key ☑️ - Enables using multiple keys for different qualities
🎥 Video key settings:
- Intended track type - Name of the track - configuration for given name must be prepared on DRM side
- Min pixels / Max pixels - Range of pixels that uses specified keyId
- Key id - Enter auto for random keyId or fixed id of key in hex
🔉 Audio key settings:
- Intended track type - Name of the track - configuration for given name must be prepared on DRM side
- Key id mode - Select one of the following auto, manual, unencrypted audio
- Key Id - Only for for manual mode - fixed id of key in hex
HLS
- Encryption type - Select CPIX
- DRM providers - Select Fairplay
- Key server url - CPIX URL from API section at Cloud Video Kit web console
- Key server login - Login from Authentication section at Cloud Video Kit web console
- Key server password - Password from Authentication section at Cloud Video Kit web console
🔍If you can't find Login and Password parameters in Authentication section, your tenant may have BasicAuth authentication turned off. Please contact Insys to add this authentication method for you.
- Content id - Asset identifier - any unique value (e.g. GUID)
- Storage mode - File or Database
☑️ Checkbox additional settings
Click to expand additional settings
Manually define key id ☑️ - Enables defining fixed keyId
Manual key id settings: - Key id - id of key in hex
CPIX document protection ☑️ - Enables signing CPIX document with certificate Not supported by Insys Cloud DRM ❗
Enable key rotation ☑️ - Enables key rotation
Key rotation settings:
- Crypto period - Desired crypto period time
- Crypto Period Offset - Crypto period offset to modify period alignment (0 means crypto period is aligned on 0 epoch time)
- Index based content key period - Enables using numerical index for the key period instead of start-end dates
Enable multi key ☑️ - Enables using multiple keys for different qualities
🎥 Video key settings:
- Intended track type - Name of the track - configuration for given name must be prepared on DRM side
- Min pixels / Max pixels - Range of pixels that uses specified keyId
- Key id - Enter auto for random keyId or fixed id of key in hex
🔉 Audio key settings:
- Intended track type - Name of the track - configuration for given name must be prepared on DRM side
- Key id mode - Select one of the following auto, manual, unencrypted audio
- Key Id - Only for for manual mode - fixed id of key in hex