Deliver a KDM
As a Manager, create a KDM delivery for one or more projectors, and approve or reject the KDM requests of your team.
- Projects
- Archive
- Roles
- Manager
- Updated
A KDM (Key Delivery Message) unlocks an encrypted DCP on a specific projector for a specific time window. This guide is for Managers: it shows how to create a KDM delivery and how to approve the requests that Operators and Power Guests send to you. If you are an Operator, a Power Guest or a Guest, read Request a KDM.
Video: https://www.youtube.com/embed/037EZR9I0nc?&wmode=opaque
Before you start
Make sure that these four conditions are true:
- You are a Manager of the Archive Project. Roles are set for each Project. You can be a Manager in one Project and an Operator in another. Only a Manager can create a KDM without approval, approve a request or delete a delivery. To check your role, see Roles.
- The DCP is encrypted. Mnemonica creates KDMs only for encrypted DCPs.
- The DKDM for the CPL is uploaded. Without a DKDM, the CPL does not appear in the wizard. To upload one, see DKDM management.
- You have the certificate of each target projector. A certificate is a DCI/SMPTE X.509 file (
.pem) that the cinema gives you. You can register it before you start, or during the wizard.
| What you can do | Manager |
|---|---|
| Create a KDM | Directly, no approval |
| Approve, request changes to, or reject a request | Yes |
| Download KDM files | Yes |
| Delete a delivery | Yes |
Open the KDM module
From the Mnemonica main dashboard, click KDMs in the bottom navigation bar. The module has three tabs:
| Tab | Content |
|---|---|
| Active | Current deliveries: pending and approved |
| History | Completed and rejected deliveries |
| Devices | Your registered projector certificates |
Register a projector certificate
Open the Devices tab and click the add button (+) in the toolbar. The menu has two options:
- Upload Certificate: add a
.pemfile that the cinema sent you. - Browse Platform: import a certificate that is already registered on Mnemonica. Use this option when your organization manages certificates centrally.
Upload Certificate
Choose the option
Click Upload Certificate in the menu.
Name the device
Type a Device Name, for example "Main Theater Projector".
Add the file
Drop the .pem file into the upload area, or click the area to browse.
Upload
Click Upload.
Browse Platform
Choose the option
Click Browse Platform in the menu.
Select the certificate
Filter the list of platform certificates. Click a certificate to select it.
Name the device
Type a Device Name for your library.
Import
Click Import.
The Devices tab shows each certificate with its Name, Organization, DN Qualifier, Status (valid or expired), Issuer, Validity and the date you Added it. Click a row to open the Inspector panel with all the certificate details.
To change a certificate, click the options button (⋮) on its row:
- Edit Device: change the name or replace the certificate file.
- Remove Device: delete the certificate from your library permanently.
Create a KDM delivery
On the Active tab, click Create new KDM delivery. The wizard title is "Create KDM", because you are a Manager.
Select the Project
Select the Project that contains the content. Use the search bar to filter by name. Only Projects with encrypted DCPs appear.
Select the CPL
Select the CPL (Composition Playlist), the version of the content to unlock. Each CPL can have a different language, subtitle track or audio configuration. Its tags show resolution, frame rate, audio format and aspect ratio.
Select the certificates
Select each projector that receives the KDM. You can select many certificates for one delivery. On Your Certificates, filter by name, organization or DN qualifier. If a projector is not registered, open Upload Certificate and add its .pem file there.
Set the validity
Select a preset or type custom dates in Valid From and Valid Until.
The KDM works only in this time window. After the Valid Until time, the projector cannot play the content.
The presets are 24 Hours (1 day), 1 Week (7 days), 2 Weeks (14 days) and 1 Month (about 30 days).
Type the recipient
Type the recipient email. You can also type a message.
Review and create
Read the summary in Content, Configuration and Delivery. To change a value, click Edit in that section. Click Create KDM.
Mnemonica generates the KDM immediately and notifies the recipient.
If you close the wizard after you type data, Mnemonica asks you to confirm: "Discard changes? All progress in this wizard will be lost."
Approve or reject a request
When an Operator or a Power Guest submits a KDM request, you receive a notification. The request shows on your Active tab with the Pending status, and the direction is Incoming.
Find the request
On the Active tab, click the filter icon. Set Direction to Incoming and Status to Pending.
Check the request
Click the row to open the Inspector panel. Check the CPL, the devices, the validity and the requester's message.
Decide
Click the Pending status badge. Select one action from the menu.
| Action | Result |
|---|---|
| Approve | Mnemonica generates the KDM immediately and notifies the recipient. |
| Request Changes | The request goes back to the requester with your message. The requester can edit it and submit it again. |
| Reject | The request closes permanently. The requester cannot submit it again. |
Request Changes and Reject open a dialog where you type your message or reason. Mnemonica notifies the requester in both cases.
Manage your deliveries
The Active tab shows the deliveries that you created (outgoing) and the requests sent to you (incoming).
| Column | Content |
|---|---|
| CPL | Content package name |
| Devices | Click the count to open the Delivery Devices dialog |
| To / From | Recipient email (outgoing) or requester email (incoming) |
| Validity | Start and end dates |
| Status | Pending, Approved or Rejected |
| Created | Date of the delivery |
| Log | Approval history |
| Actions | Download, Delete |
To filter the list, type in the search bar, or click the filter icon to filter by Direction, Status, Media info, Languages or Subtitles. Click Reset all filters to clear them. Click a row to open the Inspector panel, and click Show/Hide Inspector to close it.
Click the options button (⋮) on a delivery row:
- Download: download the KDM files. Only approved deliveries have this option.
- Delete: remove the delivery permanently.
The History tab keeps the completed and rejected deliveries as a read-only archive, with their Recipient, Validity, final Status and Log. You cannot change a delivery in History.
Troubleshooting
"No CPLs found" in the wizard. The DCP is not encrypted, or its DKDM is not uploaded. Check the DCP, then upload the DKDM: see DKDM management.
"No certificates uploaded yet". Register a certificate on the Devices tab, or upload one in the certificates step of the wizard.
A certificate shows "Expired". You can select it, but its KDMs do not work on the projector. Ask the cinema for a new certificate.
A request does not show on your Active tab. Make sure that you are a Manager of that Project. Then clear the filters with Reset all filters.
To learn more about the DKDM and the full KDM workflow, see Mnemonica DCP KDMs.
Related articles
Request a KDM
As an Operator or a Power Guest, request a KDM for a projector and follow it until a Manager approves it. As a Guest, download the KDMs sent to you.
DKDM management
Upload, view, download and delete the DKDMs (master keys) that let Mnemonica generate KDMs for encrypted DCPs.
Add a DCP and its DKDMs
Create a DCP or IMF Package from its ASSETMAP file, attach the DKDM of an encrypted DCP, and read the DKDM indicator in the Media pool.