Unified Origin - DRMΒΆ

Unified Origin supports all major DRM systems. If you are packaging content for offline, please see Unified Packager.

This section describes the on-the-fly encryption possibilities: encryption is added when the fragment is served. This works for both clear and pre-encrypted content for VOD as well as for Live.

Schematically this looks like the following:

drm keys --> origin <-- (encrypted) hds|hls|hss|dash

The following matrix shows the possible combinations of the various DRM systems and the ABR playout formats, integration with DRM providers is documented where applicable within the actual DRM documentation.

Digital Rights Management MPEG-DASH HDS TS HLS fMP4 HLS HSS
Microsoft PlayReady yes   yes yes yes
Adobe Primetime yes yes yes    
Marlin yes   yes    
Widevine Modular yes        
Apple FairPlay     yes yes  

When DRM is enabled for (a) certain format(s), Unified Origin will automatically disable playout of the formats that are not protected. To override this default behaviour, explicity signal that playout of the unprotected (‘clear’) format(s) should be allowed by using --[iss|hls|hds|mpd].playout=clear when generating the server manifest.

Table of Contents


Please note that a key (key id or content key) of ‘0’ (e.g. 0x00000000000000000000000000000000) is not valid in any of the DRMs outlined above.

Supported functionality per web server

Webserver DRM
Apache y
Nginx y
Lighttpd y
IIS 7/8 y