How can I test my Key Security Module without an Apple developer account?

I've been searching all over to find an answer to this question. I know that FairPlay/HLS supports audio Streams since there's obviously audio in video, but I'm wondering if this is practical? Also is there any way to stream FairPlay DRM encrypted content without HLS? or if I use HLS could I create only a single audio bitrate format in order to save on hosting costs? I work on and Audio Book app that requires DRM for some content. Also any links to documentation, videos, tutorials, blog posts... etc on the topic would be awesome too. Very much appreciate anyone who takes the time to answer this. I wish this was more explicitly talked about on the Apple Dev site, but it seems very geared towards video streaming.

I am using a sample test app provided by Apple (HLSCatalog) - https://developer.apple.com/streaming/fps/ that works with FairPlay streaming. I changed the manifest URL and the content keys as well as specifying a different application certificate and loading that certificate to the device. With the same manifest and app cert, the content plays successfully on Safari with FPS. I get this error in the callback that should be returning the SPC data: Error Domain=AVFoundationErrorDomain Code=-11836 "Cannot Open" UserInfo={NSLocalizedFailureReason=This app is not authorized to play this file., NSLocalizedDescription=Cannot Open, NSUnderlyingError=0x28146bbd0 {Error Domain=NSOSStatusErrorDomain Code=-42679 "(null)"}

The dask hardcoded and provided by Apple can be used to test vectors (parse spc and validate ckc). But when I test with client playback software in Safari, this Dask can not be used to decrypt Skr1 payload of the spc. How can I obtain a valid Dask to test secure delivery content between Key Server and playback software?

Hello, While parsing CKC, the verify_ckc tool raises an error with the value length of the HDCP_Enforcement TLLV (TAG = 0x2e52f1530d8ddb4a). Is it a 8-byte value or a 16-byte value ? Thanks for your help, Vincent

More details are in the hyperlink below

Hi,I have three questions about FairPlay.1. In FairPlayStreaming_PG.pdf on page 27, the document says that"In the code sample shown in the iOS FPS Client sample (included in the SDK),kTestAppCert contains the Application Certificate.".So I searched kTestAppCert, but kTestAppCert did not show up in the iOS FPS Client sample.Where does kTestAppCert appears and what is it?2. In FairPlayStreaming_PG.pdf page 26, the document says that"Do not hard-code the Application Certificate in the playback application".I would like to know a prefered way to store the Application Certificate.3. In SKDServer.c, line 1487, there is a 16 bit length key.If my understanding is correct, this is a content key and must be set a vaild key at this time.Is my understanding correct?Any advice and suggestions will be greatly appreciated.Thank you.

Hi, We have been having issues with playback that result in the playback stopping due to the error code below: **CoreMediaErrorDomain Code=-12863 ** 10:57:05.306794+0200 mediaserverd <<<< FigStreamPlayer >>>> fpfs_StopPlayingItem: [0x104fe78d0|P/XL] <0x1079a9000|I/SFH.01> Stopping, err=Error Domain=CoreMediaErrorDomain Code=-12863{code} However I am unable to find any reference to what this error code means. Could anyone help? Regards

Hello all, I recently encountered a problem similar to what has been asked here (sadly no answer): https://developer.apple.com/forums/thread/127808?login=true When downloading an HLS stream via an aggregate task (regardless if I set it to use preferred, or all media selections) I get an error on offline playback. If my device is connected, all seems to work ok. Upon inspection of the boot.xml in the .movpkg file, I can see some streams report <Complete>NO</Complete></Stream> I cannot quite work out why this is. Before playback the resultant AVURLAsset's status is not ready. The movie has multiple audio and a single subtitle and video tracks. It is important to mention, playback seems to work for some of my test videos. I also use a VPN. Any assistance would be much appreciated.

I'm trying to play a video hosted in CloudFront. It works fine from Android, from the website and even from another native iOS app. This is the error I'm getting, I can't find a similar error code 15622 in the forum: [tcp] tcp_input [C16.1:3] flags=[R] seq=3391960260, ack=0, win=0 state=LAST_ACK rcv_nxt=3391960260, snd_una=830933021 [tcp] tcp_input [C17.1:3] flags=[R] seq=1838595670, ack=0, win=0 state=LAST_ACK rcv_nxt=1838595670, snd_una=719010170 [tcp] tcp_input [C18.1:3] flags=[R] seq=4156548764, ack=0, win=0 state=LAST_ACK rcv_nxt=4156548764, snd_una=4036511524 [tcp] tcp_input [C18.1:3] flags=[R] seq=4156548764, ack=0, win=0 state=CLOSED rcv_nxt=4156548764, snd_una=4036511524 Failed to load video: Error Domain=CoreMediaErrorDomain Code=-15622 "See -[AVPlayerItem errorLog] for 17 events" UserInfo={NSDebugDescription=See -[AVPlayerItem errorLog] for 17 events} flutter: flutter: PlatformException(VideoError, Failed to load video: The operation couldn’t be completed. (CoreMediaErrorDomain error -15622.), null, null)

Our app is receiving more of these 2 errors recently. But there is 0 documentation or search result about these 2 errors. Anyone know what they mean? CoreMediaErrorDomain: -16934 CoreMediaErrorDomain: 28

Hello!We are developing a propietary KSM for our company. We have already access to our FairPlay certificate and ASK but we would like to not use production credentials in development process. We have found a development certificate (Common Name: Partner2) in "FairPlay_Streaming_Server_SDK_v4.2.0" but we have not found the associated ASK for that certificate.Where can we found the ASK?Thanks!

Hi, We are trying to adopt FPS for mp4 content protection playing on safari browser of Mac OS. I have verified that native functions of safari browser support the decryption for AES-128 encrypted TSs based on EME of HTML5 and HLS mechanism, where the CEK stores in http server described in the m3u8 manifest and is delivered to the browser in plain. Although it is a simple and easy solution to protect the mp4 contents, the security is still matter because the key is delivered in plain. So we decided to implment a key server to issue the CKC message after receiving SPC as safari browser's key request. I have a question before starting it. Q: The Encrypted AES-128 key in the Table 2-3. SPC container structure of FairPlay Streaming Programming Guide document says that "This key is itself encrypted, using RSA public key encryption with Optimal Asymmetric Encryption Padding (OAEP)". It means we needs a private key to decrypt it. I understand it if the client is a proprietary application so that the public key would be one of the FPS development credential, which will be issued by Apple according to our request. Because the client application can use the public key during the implementation. But what if the client is the safari browser? We cannot use any kind of new issued public key for the safari browser. I guess Mac OS uses some fixed public key which is already issued by Apple for safari browser's FPS. Now how can I get the counter private key? It could not be contained in the FPS credential. Because it should be a fixed one, not new generated one.

Hello I have a HLS manifest with multiple audio and multiple subtitle tracks. I use AVPlayer on iOS to play this HLS asset. On the iOS app I have the freedom to display selective subtitle and audio track list to the user but when the user uses AirPlay on the iOS, all the subtitle and audio tracks available in the HLS manifest is displayed to the user on the Apple TV (or any AirPlay compatible device). Let me explain with one example. Say, the HLS manifest has the following tracks: English, Spanish & German audio tracks English, Italian, Spanish & German subtitle tracks When the user uses AirPlay, I want to hide German language and display only the following tracks on the Apple TV: English & Spanish audio tracks English, Italian & Spanish subtitle tracks The primary intent here is that the user should not be able to see German language anywhere on the target AirPlay device. How to achieve this in code? Note: It's difficult to modify the source HLS manifest file.

Hi,Refering to the "FairPlay Streaming Certificate Generation Guide"On page 7, we have created newreq.inf file and generated certreq.csr However, we didn't apply "certreq -accept newcert.pem"Then, we continue to create FPS Certificate by uploading our certreq.csr.We received the ASk and fairplay.cerWill this be a problem?Is there anyway we can amend the private key? Or do we need to resubmit FPS Deployment package to redo the process?Thanks.

I have an iOS app that can play audio books as FairPlay DRM'd audio streams. I'm using AVContentKeySession to fetch keys and AVQueuePlayer to play. It works great on iOS, but on Catalyst (Monterey 12.3.1, M1 Max MacBook Pro) it crashes. When it happens in debug, I get a message "Too few bits left in input buffer" printed to the console, and an exception is thrown in the guts of what appears to be core media. Here's the output from [NSThread callStackSymbols] when paused on an exception breakpoint at that point: 0   ???                       0x0000000156b8cc9c 0x0 + 5749918876, 1   BRFree                    0x000000010445cf08 main + 0, 2   AudioCodecs               0x0000000157918c24 _ZL11GetPropertyPvjPjS_ + 52, 3   AudioToolboxCore          0x00000001862536a4 _ZN15ADTSAudioStream11ParseHeaderER27AudioFileStreamContinuation + 1060, 4   AudioToolboxCore          0x000000018624259c AudioFileStreamParseBytes + 412, 5   MediaToolbox              0x00000001915f7d98 FigManifoldCreateForICY + 2176, 6   MediaToolbox              0x00000001915f7718 FigManifoldCreateForICY + 512, 7   MediaToolbox              0x00000001916bbd78 FigPlayerStreamCreate + 315920, 8   MediaToolbox              0x0000000191a269a0 FigMetadataConverterCreateForQuickTimeToFromiTunes + 45888, 9   MediaToolbox              0x0000000191a4a290 FigMetadataConverterCreateForQuickTimeToFromiTunes + 191536, 10  MediaToolbox              0x0000000191a2a470 FigMetadataConverterCreateForQuickTimeToFromiTunes + 60944, 11  MediaToolbox              0x0000000191a28c34 FigMetadataConverterCreateForQuickTimeToFromiTunes + 54740, 12  MediaToolbox              0x0000000191a413b4 FigMetadataConverterCreateForQuickTimeToFromiTunes + 154964, 13  MediaToolbox              0x0000000191a2f144 FigMetadataConverterCreateForQuickTimeToFromiTunes + 80612, 14  MediaToolbox              0x00000001917cae64 FigAlternateFilterMonitorCreateForThermalNotification + 30428, 15  MediaToolbox              0x00000001917ccb44 FigAlternateFilterMonitorCreateForThermalNotification + 37820, 16  MediaToolbox              0x00000001917cb134 FigAlternateFilterMonitorCreateForThermalNotification + 31148, 17  CFNetwork                 0x0000000189937cd4 _CFHostIsDomainTopLevelForCertificatePolicy + 27728, 18  Foundation                0x0000000185ba980c __NSBLOCKOPERATION_IS_CALLING_OUT_TO_A_BLOCK__ + 24, 19  Foundation                0x0000000185ba96b4 -[NSBlockOperation main] + 104, 20  Foundation                0x0000000185ba9644 __NSOPERATION_IS_INVOKING_MAIN__ + 24, 21  Foundation                0x0000000185ba88dc -[NSOperation start] + 788, 22  Foundation                0x0000000185ba85c0 __NSOPERATIONQUEUE_IS_STARTING_AN_OPERATION__ + 24, 23  Foundation                0x0000000185ba8478 __NSOQSchedule_f + 184, 24  libdispatch.dylib         0x00000001099f60f4 _dispatch_block_async_invoke2 + 148, 25  libdispatch.dylib         0x00000001099e2394 _dispatch_client_callout + 20, 26  libdispatch.dylib         0x00000001099eb778 _dispatch_lane_serial_drain + 980, 27  libdispatch.dylib         0x00000001099ec814 _dispatch_lane_invoke + 492, 28  libdispatch.dylib         0x00000001099f9fc8 _dispatch_root_queue_drain + 408, 29  libdispatch.dylib         0x00000001099f9d3c _dispatch_worker_thread + 264, 30  libsystem_pthread.dylib   0x00000001094e1890 _pthread_start + 148, 31  libsystem_pthread.dylib   0x00000001094ebaa8 thread_start + 8 In the Debug Navigator, the top of the stack looks a little different: #0 0x0000000184bdeb3c in __cxa_throw () #1 0x000000015791941c in ACMP4AACLowComplexityDecoder::GetProperty(unsigned int, unsigned int&, void*) () #2 0x0000000157918c24 in GetProperty(void*, unsigned int, unsigned int*, void*) () #3 0x00000001862536a4 in ADTSAudioStream::ParseHeader(AudioFileStreamContinuation&) () #4 0x000000018624259c in AudioFileStreamParseBytes () #5 0x00000001915f7d98 in ___lldb_unnamed_symbol598$$MediaToolbox () What's going wrong here? Can anyone give me direction on what to fix? Or is FairPlay audio not even expected to work in Catalyst at this point?

When I tested it, mp4 container subtitles cannot be played (VTT can be played). mp4 subtitles AVFoundation doesn't support mp4 subtitles?

Website serving Apple FairPlay videos here... I have three users reporting problems with playback using Safari on iPad with iOS 15.4. It seems they can no longer use Chrome (where we serve the same videos using DASH+CENC) either. That is all I know at this time. Not finding anything from google except the 15.1 FairPlay debacle... Just fishing. Anything similar for anyone else? Thank you kindly.

Hello everyone, I have downloaded the SDK 4.4.1 from Apple and I'm trying to implement fairplay streaming with encrypted videos. I have arrived the a section whereby it is asking to test Key Security Modules. I cannot get hold of any pkeyPem variable with a value and also cannot find the spc_internal_values_v2.txt file. Can anyone help me out? Thank you very much!

Hi All,I'm testing the KSM implementation in the spc_internal_values_v2.txt file provided by the sdk we have spc payload data,but the ksm needs the entire spc container message to process the request(including the version, IV, key and certificate hash).is there a way to test the implementation?Thanks in advance