DCI-compliant signing certificate for KDM and DKDM generation

[FutureX]

Forgive my ignorance but where do you get the DCI-compliant signing certificate for KDM and DKDM generation? I know DOM has it's built in cert but how do I get a cert specifically for a brand or company?

[carl]

I don't quite understand. What are you trying to do?

[FutureX]

We're trying to create KDMs/DKDMs for commercial deliveries.

I know I can create self-signed certs (KDMs) in DOM.

But for commercial deliveries don't I need a trusted and traceable cert, a DCI-compliant (qualified) certificate issued by a recognized Certificate Authority (like Qube, Fraunhofer, EIKONA)?

[carl]

As far as I know, nobody is checking the signing certificate for trust. As long as your KDMs target the right certificate you should be fine.

[FutureX]

That's great news! I reached out to every Cert Authority I could find and didn't hear back from one of them.

Thanks!

[Carsten]

What Carl says. You may obtain an official cert chain and use that in DOM, but it is not a necessity in order to create and distribute fully DCI compliant encrypted and signed DCPs and KDMs. The only exception known to me is DCPs for IMAX laser, but that's a whole different story. IMAX has their own ecosystem. You can still create 'standard' DCPs for them, but they can't use any advanced IMAX laser features.

[FutureX]

Great, thanks for the info!