DKDM management
Upload, view, download and delete the DKDMs (master keys) that let Mnemonica generate KDMs for encrypted DCPs.
- Projects
- Archive
- Roles
- ManagerOperator
- Updated
This guide explains how to manage DKDMs (Distribution KDMs) in Mnemonica: upload, view, download and delete the master keys that enable KDM generation for encrypted DCPs. To create KDMs, see Deliver a KDM.
This guide is for Team Members. Only Managers and Operators can manage DKDMs.
Video: https://www.youtube.com/embed/MtoYo9KqAQc?&wmode=opaque
What is a DKDM?
A Distribution KDM (DKDM) is a master encryption key in XML format. It authorizes the Mnemonica platform to generate device-specific KDMs for an encrypted DCP. If no DKDM is uploaded for a DCP, the platform cannot produce KDM deliveries for that content.
A DKDM is the first requirement for KDM generation. You upload each DKDM and associate it with specific assets. The KDM Distribution module then uses the DKDMs to generate playback keys for specific projectors.
Mnemonica KDM download
Mnemonica can create KDMs only for DCPs mastered with the Mnemonica distribution certificate. If you master a DCP with a different certificate, its DKDM does not work in Mnemonica.
Download the Mnemonica distribution certificate to use in your mastering system. The certificate is in PEM format.
Download the Mnemonica distribution certificate
Accessing the DKDM Dialog
DKDM management is in the Works module, not in the KDM module.
The Manage DKDMs menu item appears only for encrypted DCP Packages, and only for Team Members (Managers and Operators) of the Project.
Open the Works page
Open an Archive Project from the Dashboard. Click Works in the bottom bar.
Select the Version
Double-click a Work (for example Kiss And Test). Select a Version (for example KDM-TEST-01).
Open the DKDM dialog
In the Media pool, find the encrypted DCP row. Click the options button (⋮) on the DCP row and select Manage DKDMs.
Identifying Encrypted DCPs
Encrypted DCP rows show indicator icons in the Media pool. The DKDM count badge shows how many DKDMs are uploaded for that asset (0, 1, and so on).
Uploading a DKDM during DCP creation
You can also upload a DKDM when you create the DCP Package.
When you create a DCP, upload the ASSETMAP first. The ASSETMAP upload dialog has a Select DKDM file (.xml) button at the bottom. Click it to provide the DKDM together with the ASSETMAP.
Uploading a DKDM for an existing DCP
The dialog depends on whether DKDMs already exist for the asset.
First upload (empty state)
If no DKDMs exist, the dialog shows a drag-and-drop upload zone. Drag an .xml file onto the zone, or click the zone to browse. Mnemonica accepts only .xml files.
Subsequent uploads
If DKDMs already exist, a compact Upload DKDM button appears above the table. Click it to open the file browser.
Upload Feedback
| Result | Message |
|---|---|
| Success | "DKDM uploaded successfully" |
| Wrong format | "Please select a valid .xml file" |
| API error | "Failed to upload [filename]" |
| Read error | "Failed to read [filename]" |
Viewing DKDMs
After you upload a DKDM, the dialog shows a sortable table. The asset name appears at the top of the dialog with a DCP icon. The default sort puts the most recently uploaded DKDM first.
| Column | Description |
|---|---|
| DKDM | CPL URN identifier (hover for full URN) |
| Valid From | Start date of the DKDM validity |
| Valid To | End date (shown in red if expired) |
| Uploaded | Date the DKDM was added to the platform |
Downloading a DKDM
Click the options button (⋮) on the DKDM row and select Download. The XML file downloads to your computer.
Deleting a DKDM
If you delete a DKDM, the platform cannot generate new KDMs for this content. KDMs that were already delivered stay valid until they expire.
Click the options button (⋮) on the DKDM row and select Delete. A confirmation dialog appears: "Delete DKDM "[CPL URN]"? This action cannot be undone."
| Result | Message |
|---|---|
| Success | "DKDM deleted" |
| Error | "Failed to delete DKDM" |
Troubleshooting
"Manage DKDMs" not visible in the menu
You must be a Team Member (Manager or Operator) of the Project. The asset must be an encrypted DCP (not a plain DCP or another media type).
Content not appearing in the KDM wizard
After you upload a DKDM, the corresponding CPL must appear in the Content step of the KDM wizard. If it does not, do these checks:
- Verify that the DKDM uploaded successfully (check the table in the dialog).
- Confirm that the DKDM is not expired (the Valid To date must be in the future).
- Wait a moment. The CPL list can take time to refresh.
"Please select a valid .xml file"
Mnemonica accepts only .xml files. Make sure that your DKDM file has the correct extension.
Expired DKDM (red date)
You cannot use an expired DKDM (Valid To date in the past, shown in red) to generate KDMs. Ask your content provider for a new DKDM with valid dates, and upload it.
Glossary
| Term | Definition |
|---|---|
| DKDM | Distribution KDM: a master XML key that authorizes a platform to generate device-specific KDMs |
| DCP | Digital Cinema Package: encrypted film content delivered to cinemas |
| CPL | Composition Playlist: identifies a specific version of the content within a DCP |
| CPL URN | Unique identifier for a CPL (for example urn:uuid:9ccb10e5-...) |
| KDM | Key Delivery Message: device-specific decryption key generated from a DKDM |
Related articles
Add a DCP and its DKDMs
Create a DCP or IMF Package from its ASSETMAP file, attach the DKDM of an encrypted DCP, and read the DKDM indicator in the Media pool.
Mnemonica DCP KDMs
Learn how DKDMs and KDM deliveries work in Mnemonica, who can do what, and where to download the Mnemonica distribution certificate.
Add a Package and upload assets
Create a Package in a Version of a Work, choose its type, and upload files and folders into it. Learn what the Gallery Package does.
Versions of a Work
Keep each cut of a title in its own Version, describe it with its own metadata, and select one or more Versions to see their content.