Director Conditional Access (CA)

MediaKind Director provides a full Conditional Access system to secure delivery of digital content encrypted using rotating keys that are distributed within the transport stream.

The keys are encrypted and transmitted within the transport stream using Entitlement Control Messages (ECMs) so multiple keys can be transmitted to decrypt more than one service.

Director CA offers Access Control Management which is controlled at the Director headend so that an operator can authorize or deauthorize receivers. This allows the operator to easily manage or restrict which receiver can access the secure content.

Supply the Director headend information

Receivers under control of the Director headend are addressed by a unique Director Hardware ID and receiver type. This information must be provided to the Director headend operator before the receiver can be authorized to decrypt secure content. A service must be assigned a Director Hardware ID in order to receive control messages from the Director headend.

Before you start, ensute at least one service is configured, and Receiver Type is RX1.

1. From the Home page, select the RECEIVER item from the required feed then click to edit

2. From the Parameters window, select the Decrypt tab.

   

3. From the Director hardware ID drop down list, select an unused entry as shown in the example.

Load a Director secondary key

The Director secondary key file is provided by the Director headend operator via a secure mechanism. The file must be placed in a location that is accessible by the machine being used to browse to the RX1. The Director secondary keys are paired with the Director Hardware ID and will follow that ID wherever it assigned to a service. If the secondary keys are required for a different Director Hardware ID, then the process of uploading the Director secondary key file must be repeated for each ID to pair against.

At least one service is configured, the Director Hardware ID is assigned and Receiver Type is RX1.

1. From the Home page, select the RECEIVER item from the required feed then click to edit

2. Select the Decrypt tab in the Parameters window.

3. Ensure the correct Director Hardware ID is selected before pairing with the secondary key file.

4. Click the Select a file input box and navigate to the secondary key file.

5. Click the Upload button to upload the file. The Director secondary key file should be uploaded and paired against the Director Hardware ID assigned in the current service.

6. To confirm the secondary key file that was uploaded last check the Input status window.