Hello, I am queueing up download task on a AVAssetDownloadURLSession - if I queue up 6-7 downloads, not all of them start straight away in the foreground, some are actually queued up and will begin, run and complete while the app is in background mode. The HLS streams I am downloading are FairPlay protected, so I use AVContentKeySession to fetch the keys for each download I pass the AVURLAsset to the key session via addContentKeyRecipient since I don't have an skd. To my understanding, the key session won't actually kick in before I start the download , i.e. so it can download the manifest and find the skd and then I can go through the whole DRM flow - i.e. the asset download task needs to actually begin for all this to work. Problem is, if my app is in the background, the part of my code that calls addContentKeyRecipient is not executed, since the background session only notifies you when it has completed, or failed. My question is - how are we supposed to fetch licenses while in the background? Does content key session provide some background support? Apple's advice is to always preload keys, but it seems this is not always possible. Am I missing something? Thanks in advance for any assistance.

I have a current implementation that uses AVPlayer and AVContentKeySession that works perfectly fine. I am integrating a custom player into the current project and was wondering if FPS content would work. So my question is if AVSampleBufferAttachContentKey can be used to decrypt FPS-protected (HLS) content without AVPlayer? If yes, is there any documentation on how this should be used?

Hi guys, I should create FP Streaming certificate on Appstore to provide secured content streaming. I have one registered FP Streaming certiticate already. when i tried to create one more, i couldn't do it as belows. is there any limitation? i cannot register two FP Streaming certiticates? One more thing, I tried to remove registered certificate but there was no way to do it as belows There is no [revoke] button. Does anybody know the reason? Many thanks June, Chung

I have packaged a content having video resolutions 2160,1080,720,480,320 and 240 and audio formats such as EC4JOC, EC3, AC4 and AAC with shaka packager. In both DRM and Non-DRM case we found video is not playing in apple devices. Then I tried by removing random tracks, one at a time and re-pack the content. Surprisingly, it started playing in both non-drm and drm versions when I removed the ac-4 audio track from the packaging command. Note that we are trying with cmaf version. I have raised this to shaka's github and they suggested like it might be a problem of apple and we need to post this to apple. Thank You

On updating to iOS 16.1 we started having playback failure for all our drm content on safari/chrome for ios which uses fairplay. Versions below 16.0 or earlier do not have this issue. We have tried using video js player with minimum eme plugins required to play drm/fairplay and no player customizations, that still doesn't play back. We get the media decoder saying : VIDEOJS: ERROR: (CODE:3 MEDIA_ERR_DECODE) The media playback was aborted due to a corruption problem or because the media used features your browser did not support. MediaError {code: 3, message: "The media playback was aborted due to a corruption…media used features your browser did not support."} This issue looks localized to fairplay on ios 16.1. Has there been any changes to fairplay on ios browsers?.

I managed to play FPS protected content on Safari. Then added lease/rental TLLV to manage simultanous playback. iOS worked fine by hardcoding expiryDuration and let AVAssetResourceLoadingRequest.contentInformationRequest does its job.Unfortunately, there is no such a feature on Safari. I could not find any possible function on WebKitMediaKeySession object.So, how to create an SPC request for license renewal?

We want to protect media content in fmp4 format for HLS. The content are encoded in H.264 and H.265. Apple devices need to be supported. So FairPlay/CENC cbcs mode are key DRM methods. Following questions have emeged once we started the development work:1. For H.264 sample encryption, Apple's FairPlay spec says to leave the first 32 bytes of VCL NALU clear (1 byte for VCL NALU type + following 31 bytes). Then pattern (1:9) encryption starts. But in CENC spec (ISO-23001-7:2016), it requires to leave 1 byte for VCL NALU type + slice header to be clear. Then patern (1:9) encryption starts. Which spec should we follow to encrypt h.264 samples in fmp4 format? We think what Apple's FairPlay spec describes is a better method. But we will comply with the standard regardless;2. In Section 9.5.2.2 of ISO-23001-7:2016, it is mentioned that:"Encrypted slice headers were not prohibited in the first edition of this part of ISO/IEC 23001 butwere prohibited by application specifications. A “SHOULD” requirement to leave slice headers unencrypted for‘avc1’ allows possible legacy content with encrypted slice headers to remain conformant to this new edition.But, new content should not encrypt slice headers or it may not decode properly in secure video decoders."Our video codec type is "avc1". Does that mean we are allowed to enctypt the slice headers of video also?3. Where can we find the guidlines fot H.265 encryption by FairPlay/CENC cbcs mode?Thanks!

How can I test my Key Security Module without an Apple developer account?

I've been searching all over to find an answer to this question. I know that FairPlay/HLS supports audio Streams since there's obviously audio in video, but I'm wondering if this is practical? Also is there any way to stream FairPlay DRM encrypted content without HLS? or if I use HLS could I create only a single audio bitrate format in order to save on hosting costs? I work on and Audio Book app that requires DRM for some content. Also any links to documentation, videos, tutorials, blog posts... etc on the topic would be awesome too. Very much appreciate anyone who takes the time to answer this. I wish this was more explicitly talked about on the Apple Dev site, but it seems very geared towards video streaming.

I am using a sample test app provided by Apple (HLSCatalog) - https://developer.apple.com/streaming/fps/ that works with FairPlay streaming. I changed the manifest URL and the content keys as well as specifying a different application certificate and loading that certificate to the device. With the same manifest and app cert, the content plays successfully on Safari with FPS. I get this error in the callback that should be returning the SPC data: Error Domain=AVFoundationErrorDomain Code=-11836 "Cannot Open" UserInfo={NSLocalizedFailureReason=This app is not authorized to play this file., NSLocalizedDescription=Cannot Open, NSUnderlyingError=0x28146bbd0 {Error Domain=NSOSStatusErrorDomain Code=-42679 "(null)"}

The dask hardcoded and provided by Apple can be used to test vectors (parse spc and validate ckc). But when I test with client playback software in Safari, this Dask can not be used to decrypt Skr1 payload of the spc. How can I obtain a valid Dask to test secure delivery content between Key Server and playback software?

Hello, While parsing CKC, the verify_ckc tool raises an error with the value length of the HDCP_Enforcement TLLV (TAG = 0x2e52f1530d8ddb4a). Is it a 8-byte value or a 16-byte value ? Thanks for your help, Vincent

More details are in the hyperlink below

Hi,I have three questions about FairPlay.1. In FairPlayStreaming_PG.pdf on page 27, the document says that"In the code sample shown in the iOS FPS Client sample (included in the SDK),kTestAppCert contains the Application Certificate.".So I searched kTestAppCert, but kTestAppCert did not show up in the iOS FPS Client sample.Where does kTestAppCert appears and what is it?2. In FairPlayStreaming_PG.pdf page 26, the document says that"Do not hard-code the Application Certificate in the playback application".I would like to know a prefered way to store the Application Certificate.3. In SKDServer.c, line 1487, there is a 16 bit length key.If my understanding is correct, this is a content key and must be set a vaild key at this time.Is my understanding correct?Any advice and suggestions will be greatly appreciated.Thank you.

Hi, We have been having issues with playback that result in the playback stopping due to the error code below: **CoreMediaErrorDomain Code=-12863 ** 10:57:05.306794+0200 mediaserverd <<<< FigStreamPlayer >>>> fpfs_StopPlayingItem: [0x104fe78d0|P/XL] <0x1079a9000|I/SFH.01> Stopping, err=Error Domain=CoreMediaErrorDomain Code=-12863{code} However I am unable to find any reference to what this error code means. Could anyone help? Regards

Hello all, I recently encountered a problem similar to what has been asked here (sadly no answer): https://developer.apple.com/forums/thread/127808?login=true When downloading an HLS stream via an aggregate task (regardless if I set it to use preferred, or all media selections) I get an error on offline playback. If my device is connected, all seems to work ok. Upon inspection of the boot.xml in the .movpkg file, I can see some streams report <Complete>NO</Complete></Stream> I cannot quite work out why this is. Before playback the resultant AVURLAsset's status is not ready. The movie has multiple audio and a single subtitle and video tracks. It is important to mention, playback seems to work for some of my test videos. I also use a VPN. Any assistance would be much appreciated.

I'm trying to play a video hosted in CloudFront. It works fine from Android, from the website and even from another native iOS app. This is the error I'm getting, I can't find a similar error code 15622 in the forum: [tcp] tcp_input [C16.1:3] flags=[R] seq=3391960260, ack=0, win=0 state=LAST_ACK rcv_nxt=3391960260, snd_una=830933021 [tcp] tcp_input [C17.1:3] flags=[R] seq=1838595670, ack=0, win=0 state=LAST_ACK rcv_nxt=1838595670, snd_una=719010170 [tcp] tcp_input [C18.1:3] flags=[R] seq=4156548764, ack=0, win=0 state=LAST_ACK rcv_nxt=4156548764, snd_una=4036511524 [tcp] tcp_input [C18.1:3] flags=[R] seq=4156548764, ack=0, win=0 state=CLOSED rcv_nxt=4156548764, snd_una=4036511524 Failed to load video: Error Domain=CoreMediaErrorDomain Code=-15622 "See -[AVPlayerItem errorLog] for 17 events" UserInfo={NSDebugDescription=See -[AVPlayerItem errorLog] for 17 events} flutter: flutter: PlatformException(VideoError, Failed to load video: The operation couldn’t be completed. (CoreMediaErrorDomain error -15622.), null, null)

Our app is receiving more of these 2 errors recently. But there is 0 documentation or search result about these 2 errors. Anyone know what they mean? CoreMediaErrorDomain: -16934 CoreMediaErrorDomain: 28

Hello!We are developing a propietary KSM for our company. We have already access to our FairPlay certificate and ASK but we would like to not use production credentials in development process. We have found a development certificate (Common Name: Partner2) in "FairPlay_Streaming_Server_SDK_v4.2.0" but we have not found the associated ASK for that certificate.Where can we found the ASK?Thanks!

Hi, We are trying to adopt FPS for mp4 content protection playing on safari browser of Mac OS. I have verified that native functions of safari browser support the decryption for AES-128 encrypted TSs based on EME of HTML5 and HLS mechanism, where the CEK stores in http server described in the m3u8 manifest and is delivered to the browser in plain. Although it is a simple and easy solution to protect the mp4 contents, the security is still matter because the key is delivered in plain. So we decided to implment a key server to issue the CKC message after receiving SPC as safari browser's key request. I have a question before starting it. Q: The Encrypted AES-128 key in the Table 2-3. SPC container structure of FairPlay Streaming Programming Guide document says that "This key is itself encrypted, using RSA public key encryption with Optimal Asymmetric Encryption Padding (OAEP)". It means we needs a private key to decrypt it. I understand it if the client is a proprietary application so that the public key would be one of the FPS development credential, which will be issued by Apple according to our request. Because the client application can use the public key during the implementation. But what if the client is the safari browser? We cannot use any kind of new issued public key for the safari browser. I guess Mac OS uses some fixed public key which is already issued by Apple for safari browser's FPS. Now how can I get the counter private key? It could not be contained in the FPS credential. Because it should be a fixed one, not new generated one.