Apple FairPlay Streaming (FPS) Digital Rights Management (DRM)

• HTTP Live Streaming (HLS) playback of encrypted video content.
• iOS, Apple TV, and Safari on macOS 10.10.3 or later.
  Playback on Safari requires Encrypted Media Extensions (EME). Playback on Safari on a mobile device also requires iOS 11.2 or later.
• Stopping playback on mobile devices and Apple TV when an expired Content Key (CK) is detected.
• Identifying individual devices without compromising anonymity via a device identifier within the Server Playback Context (SPC) message.

Quick Start #

1. Register as a licensed content owner with Apple and request a deployment package. Request FPS deployment package from Apple.
2. Request Studio DRM activation by submitting the following information via the Apple FairPlay Streaming page:
   • Your application public key certificate.
   • Your RSA private key passphrase.
   • Your application secret key.
   • Your RSA private key in PEM format.
3. Verify that both the Require a token for playback and the Require a studio approved DRM for playback options have been enabled on the desired CMS asset, live channel, or live event.
4. Make your application compatible with our service by performing the following steps:
   • Point your player to a HLS version of the playback URL that corresponds to the content identified in the previous step.
   • Construct and digitally sign this playback URL.
     Query String
     Append the following value to the end of the playback URL:
     plaintext

     Copy

     1?rmt=fps

     Studio DRM Policies
     Define the desired set of Studio DRM policies by adding either a Studio DRM policy configuration or the desired individual policies to the playback URL’s query string.
     plaintext

     Copy

     1?rmt=fps&drm_policy_name=wvpolicy1

     Use a Studio DRM policy configuration and/or the expansion parameter capability to obfuscate your Studio DRM policies.
     Digital Signature: Sign the playback URL.
   • Update the Key Server Module (KSM) URL’s scheme to https://.
   • Submit a Content Key request to our Key Server using the above KSM URL.
   • Use the deserialized Content Key Context (CKC) message to initiate playback.

Activation #

FPS Deployment Data #

Content Keys #

Update the KSM URL #

1function getSPCUrl(initData) {
2     skdurl = arrayToString(initData);
3     spcurl = skdurl.replace('skd://', 'https://');
4     spcurl = spcurl.substring(1, spcurl.length);
5     return spcurl;
6}

Request a Content Key #

• Request URL: Updated KSM URL
• Request Header: Set Content-Type header to "application/json"
• Request Body: Set it to the following key-value pair:
  • Key: spc
  • Value: Set it to a Base64-encoded string for a Server Playback Context (SPC) message.

1{
2	"spc": "your base 64 string"
3}

1{
2	"ckc": "your base 64 string"
3}

Content Key Request Minimization #

1. Contact your account manager to request that your encoding profile be optimized for content key reuse.
2. Include fpuseki=1 within the playback URL’s query string.
3. Update your player to cache licenses and associate them with license URLs.

Playback without Studio DRM Protection #

1. Disable Studio DRM by performing either of the following:

• Clear the Require studio approved DRM for playback option on the desired CMS asset.
• ass the drm_optional parameter in the playback URL. Learn more.

2. Update your player to request a cleartext key via the following URL:

More Information #

• Studio DRM Policy Configuration
• Studio DRM API
• Apple Fairplay documentation:
  • Construct SPC messages to serialize and send to the our Key Server Module.
  • Use the deserialized CKC message for content playback.