KDM_SLI Trusted Devices

[auta]

Hi, Carl.
Please help me.
How to correctly create a command to create keys with trusted devices via dcpomatic2_kdm_cli.

I use this one

Code: Select all

>dcpomatic2_kdm_cli.exe -C "D:\Dolby-IMB-271276.dcicerts\Dolby-IMB-271276.cert.sha256.pem" -T "D:\1190143602-LD-09_Mar_2023.crt" -T "D:\Dolby-IMBLD-197070.dcicerts\Dolby-IMBLD-197070.cert.sha256.pem" -f "now" -d "1 day" -F multiple-modified-transitional-1 -v -o V:\Irati_FTR_S_RU-XX_RU-12_51_2K_20250709_WRDP_IOP_OV V:\DC_OUTPUT\!ftr\Irati_FTR_S_RU-XX_RU-12_51_2K_20250709_WRDP_IOP_OV\Irati_FTR_S_RU-RU_RU-12_51_2K_20250711_WRDP_IOP_OV_DKDM.xml

[carl]

That looks reasonable - is there something wrong with the KDM that it makes?

[auta]

Yes, you see one ThumbPrint in an existing XML, but there should be 2 or more

Generete via dcpomatic2_kdm_cli

Code: Select all

 <AuthorizedDeviceInfo>
          <DeviceListIdentifier>urn:uuid:22931dbb-1cc5-4765-98bf-ec7c4ff444d3</DeviceListIdentifier>
          <DeviceListDescription>IMB-271276.DC.DOLPHIN.DC4.SMPTE</DeviceListDescription>
          <DeviceList>
            <CertificateThumbprint>2jmj7l5rSw0yVb/vlWAYkK/YBwk=</CertificateThumbprint>
          </DeviceList>
        </AuthorizedDeviceInfo>

Generate via DCP-o-matic 2 KDM Creator

Code: Select all

<AuthorizedDeviceInfo>
<DeviceListIdentifier>urn:uuid:e3030778-06cf-4824-a7ee-b81bc9324998</DeviceListIdentifier>
<DeviceListDescription>IMB-271276.DC.DOLPHIN.DC4.SMPTE</DeviceListDescription>
<DeviceList>
<CertificateThumbprint>aHbAncmzC6mfCMU1cYYxB+leZLE=</CertificateThumbprint>
<CertificateThumbprint>qnXI/qS76vRm253gJQiw22MwSPo=</CertificateThumbprint>
</DeviceList>
</AuthorizedDeviceInfo>

version 2.16.99

[IoannisSyrogiannis]

I can't help, but I also can't help but wonder:
You provide the authorized device info on the KDM, for cross checking. Yet, without cross-checking the certificates on the two sources (CLI and UI) which is not very effective.
If not share in the forum, maybe you would better get in touch with Carl, to share those. It might be that the sources are not the same on the two occasions.

Besides that, and out of curiosity, is the .crt certificate a valid input for such a purpose?
Does it target a Link Decryptor, and therefore, on top of the IMB, there is a secondary projector connected, with enigma, in Chase Mode?

[carl]

I see the bug in 2.16.99. It seems to be fixed in 2.18.20.. is there something stopping you from upgrading?

[auta]

I'm upgrade it's work great!
Thx