Guides

FairPlay DRM

🚧

You might not need this!

You only need this if you need to use your own credentials. Self-serve accounts always have their FairPlay credentials added by Gumlet automatically.

Gumlet allows you to protect your video content with Apple FairPlay DRM (Digital Rights Management) encryption. We have developed and deployed the FairPlay Streaming Server, also known as the Key Server Module (KSM), so you don't have to worry about implementing the complex FairPlay protocol.

Gumlet supports FairPlay SDK 26. SDK 26 credentials are the default for new customers; existing customers with SDK 4.x credentials can continue using them.

To enable FairPlay DRM for your organization, follow these steps.

Request FairPlay Deployment Package

  1. Please go to the Apple FairPlay page.
  2. Click on the link to Request Deployment Package. You need to have a developer account before this.
    1. Sign up for a developer account if you don't have one: https://developer.apple.com/support/enrollment/
  3. After proceeding further, you should see a form to request the deployment package.

If you apply for the Deployment Package according to the input form, you will be issued a package containing the FPS Credential Creation Guide document after Apple’s confirmation.

During the application process, you will be asked if you have completed the implementation and testing of the Key Server Module (KSM). This can be answered by saying, ‘I am using a 3rd party DRM company and the company has already built and tested KSM’.

Create Private Key and Certificate Signing Request (CSR)

Create a private key (privatekey.pem) file and a certificate signing request (certreq.csr) file from the Gumlet dashboard DRM Credentials page.

  1. Navigate to the Developers section
  2. Go to DRM Credentials
  3. Enter org details to generate a private key (.pem) and Certificate Signing Request (.csr) files.
  4. You will get a zip file with 4 files. certreq.csr, certreq_2048.csr, private_key.pem and private_key_2048.pem. You will need the files in the next step.

Note: Secure the CSR and PEM files in a safe place.

Create FPS Certificate at the Apple Developer Portal

  1. Log in to the Apple Developer Portal and navigate to the Certificate, IDs & Profiles

  2. Press the + button on the top Create a New Certificate to create a new certificate.

  3. Select the FairPlay Streaming Certificate from the list.

  4. Select SDK 26.x in the next step and click Continue.

    SDK 26 is the default for new customers. Gumlet no longer allows SDK 4.x credential uploads for new accounts. If you have already uploaded SDK 4.x credentials to Gumlet, your DRM will continue to work as is.

  5. Upload the certreq_2048.csr file in the 2048-bit certificate field and upload certreq.csr file in 1048-bit certificate field and click the Continue button.

  6. A pop-up will appear to confirm that you want to generate the certificate. Click the Generate button.

  7. When the above process is complete, you will be able to download a zip file containing 2 files. fps_certificate.bin and provisioning_data.bin. You need to upload that on the Gumlet dashboard in the next step.

Add Fairplay Credentials to Gumlet

To add your Credentials to Gumlet, go to the DRM Credentials page on the Gumlet dashboard. Upload Fairplay certificate (fps_certificate.bin), Private Key (private_key_2048.pem), and the provisioning_data.bin files.

Once the upload is complete, you are ready to stream DRM-encrypted content with Fairplay with your own credentials.

📘

You must have Apple Developer account for FairPlay credentials. Apple will charge $99/year for the developer account.