Print this page as document

Recommendation: security backup for (D)KDMs

Affects all Users of easyDCP KDM Generator+

This page contains:

1 Licenses and Certificates

2 Threat of loss of all (D)KDMs caused by hardware change / fault

3 Create a Backup machine using a Complementary License

4 Workflow Description

4.1 Standard (D)KDM Generation Process

4.2 Recommended Workflow utilizing a Backup Unit (BU)

4.3 Using the Backup Unit to recover (D)KDMs

5 How to activate your complementary license for easyDCP KDM Generator+ Backup

1 Licenses and Certificates

In order to run properly, each installation of easyDCP KDM Generator+ needs three different sets of files issued separately for each installation:

1. License – enables all commercial features
2. Signer Certificates – required to digitally sign (D)KDMs issued with the software
3. Server Certificates – An identification of the particular hardware easyDCP KDM Generator+ is installed on. (D)KDMs are issued for certain Server Certificates

During the activation process all of those files are generated using appropriate functions in the easyDCP web shop at http://www.easyDCP.com. Licenses and Server Certificates are bound to the particular hardware easyDCP KDM Generator+ is running on. Signer certificates are not tied to the hardware.

2 Threat of loss of all (D)KDMs caused by hardware change / fault

Important: If some hardware components in the production machine are changed or the machine stops operating at all, the license and server certificates will not work anymore. Using the migration function in the easyDCP web shop, a license can be ported to another machine. However, a server certificate cannot be used on another hardware. Likewise, it is not possible to re-use the certificates if certain hardware components get replaced on the system. And once the server certificates cannot be used anymore.

ALL (D)KDMs ISSUED FOR THESE SERVER CERTIFICATES ARE LOST AND CANNOT BE RECOVERED.

3 Create a Backup machine using a Complementary License

We recommend our easyDCP KDM Generator+ customers to set-up a second computer serving as backup machine for their (D)KDMs. If used properly, existing (D)KDMs can be recovered and ported to a fresh installation, in case the production machine is not working anymore. The set-up is simple and your existing (D)KDM workflow requires only small changes.

1. Every easyDCP KDM Generator+ client gets a complementary license for a second installation of the software (called the Backup Unit - BU)
2. From now on, we recommend to issue a backup DKDM for the Backup Unit once you receive a (D)KDM for your production system. For this, it is important that the Backup Unit must be installed on another physical hardware.
3. Once the production machine stops working for some reason, all (D)KDMs can be recovered using the Backup Unit.

NOTE: You can use your existing easyDCP KDM Generator+ instance to issue backup-(D)KDMs of your existing (D)KDMs for your new backup easyDCP KDM Generator+ instance. This is a one-time-only job and should be performed as soon as possible.

4 Workflow Description

This chapter gives an overview over the recommended workflow when using two instances of easyDCP KDM Generator+ in parallel.

Figure 1 shows a block diagram comprising two activated instances of the software, both identified by their Server Certificate. As mentioned above, the Server Certificate is bound to a specific hardware and installation of the operating system and cannot be used on another installation.

Figure 1: Two activated instances of easyDCP KDM Generator+ running on different hardware

4.1 Standard (D)KDM Generation Process

Figure 2 shows one of the common applications using easyDCP KDM Generator+. Here, the Main Unit (MU) receives certain input data:

1. A (D)KDM or easyDCP Digest from either the previous DCP compiling step or from another facility (step 1). An input (D)KDM can only be processed if it has been issued to the Server Certificate of the MU (compare Figure 1).
2. Certificates from various Cinema Servers that serve to identify the output (D)KDM’s recipients (step 2).
   
   

Figure 2: Standard KDM generation process using one installation of easyDCP KDM Generator+

As result easyDCP KDM Generator+ generates a batch of KDMs for the selected Cinema Servers (step 3).

4.2 Recommended Workflow utilizing a Backup Unit (BU)

Based on the workflow described above, we recommend generating a Backup DKDM for the Backup Unit (BU) shown in Figure 1 whenever a new key is used as input format (step 1). Basically, the processing-steps are identical to the description given in 4.1, but instead of only ingesting certificates from the Cinema Servers we also point our Main Unit of easyDCP KDM Generator+ to the Server Certificate of our Backup Unit (Figure 3, step 2). By doing this, easyDCP KDM Generator+ issues a Backup DKDM that can be read from the Backup Unit later. In case the MU is not available anymore, the Backup KDM can be used to recover the original keys that were used to encrypt the DCP.

Figure 3: KDM Generation Process using the Backup Unit (BU)

4.3 Using the Backup Unit to recover (D)KDMs

In case of a hardware crash or when the system components used to assemble the Main Unit’s system hash change, it is possible that the Server Certificates of the Main Unit cannot be accessed anymore. In this case it is possible to move the main unit onto a new hardware or issue a new set of license and certificates for the new configuration of the main unit. In any case, the previous Main Unit’s Server Certificates must be replaced. Through the easyDCP-web shop it is possible to get new licenses and certificates on the fly. Indeed, none of the old (D)KDMs of the former Main Unit (MU) will work with the new installation, called New Main Unit (NMU) here, since the new Main Unit is identified by a new Server Certificate. In order to get (D)KDMs working on the NMU it is necessary to use the BU as shown in Figure 4. Please note that the BU of KDM Generator+ is used instead of the MU.

Figure 4: Issuing DKDMs for the New Main Unit (NMU) using the Backup Unit (BU)

By ingesting both, all Backup-KDMs (1) as well as the Server Certificate from the New Main Unit (NMU – step 2) new DKDMs for the New Main Unit are generated.

5 How to activate a complementary license of easyDCP KDM Generator+ Backup

Step 1. Download the easyDCP KDM Generator+ Installer for your target OS from your license status again and install it.

Step 2. Request a license and certificate and send it as usual to www.easyDCP.com (see also:How do I activate my easyDCP Product?.) 

Step 3. www.easydcp.com will offer you: "Activate your complementary license". Select it for activation.

Now your license status shows a new entry called: "easyDCP KDM Generator+ Backup"

Step 4: Download the license and certificate data set and import it into your easyDCP KDM Generator+ Backup system. 

NOTE: The complementary license is locked for migration. If you need to migrate your easyDCP KDM Generator+ Backup system please contact us at info@easyDCP.com. 

Update easyDCP KDM Generator + 1.4.411 to version 4.0

• With the update to the new version 4.0, there is also a major update of the easyDCP KDM Generator+ for the first time.
• The update is available for customers with valid service.

In principle, the new programs can be operated with the new Online Activation or with the Offline Activation:

• With Online Activation, new server certificates must be issued for technical reasons.
• In order to be able to continue using exhibited DKDMs, we recommend to use the new easyDCP KDM Generator + 4.0 in Offline Activation on the same hardware as the previous easyDCP KDM Generator + 1.4.11.

With Offline Activation, please note that the password is required which was set during the creation of the license and certificate request for the previous server certificates.

And this is how you find your new easyDCP KDM Generator+ 4.0:

1. Login to the webshop www.easydcp.com as usual.
   
   
2. Select My Products in the top menu.
   
   
3. You will find a new section: Single Licenses 
   Besides easyDCP licenses up to Version 3.8.9 (without service) and easyDCP plugin licenses, you can also find your new easyDCP KDM Generator+ 4.0 license. 
   
   
   
   
4. When you select a desired easyDCP Plus / IMF Studio application entry, a submenu opens. Here you can select different services like e.g. download, migration and activation.
   Available services depend on the type and the status of the license. 

As part of the conversion to the easyDCP Plus and IMF Studio packages, we have migrated your easyDCP KDM Generator+ 1.4.411 (with valid service) to Version 4.0 as Single License. You can find an overview of your previous licenses in My Products after the section Single Licenses with the button Previous Licenses.

Complementary License

To generate a complementory license of your new easyDCP KDM Generator+ 4.0, please contact us with this form.

If you have already worked with a Complimentory License in Version 1.4.411, please activate the new complimentory license from your new easyDCP KDM Generator+ 4.0 on the same hardware as the previous Complimentory License. 
Then the existing certificates will be adopted.

In fact, this is the major difference between easyDCP KDM Generator and easyDCP KDM Generator+.

While easyDCP KDM Generator can be used to issue KDMs for DCPs created and encrypted by yourself using easyDCP Creator+, easyDCP KDM Generator+ can also be used to generate KDMs for DCP that have been created by a third party mastering station.

Just like easyDCP Player+, easyDCP KDM Generator+ also allows you to export its own public certificate. Provide this certificate containing your public key to the content owner so they can issue a Distribution KDM (DKDM) to your easyDCP KDM Generator+ installation.
You can load this DKDM into easyDCP KDM Generator+ and generate new KDMs for other recipients from it. The new KDMs time windows have to be completely covered by the DKDMs time window.

easyDCP Creator+ is bundled with a tool called easyDCP KDM Generator. A demo version of easyDCP KDM Generator is included in the easyDCP Creator+ trial version.

easyDCP KDM Generator generates Interop- and SMPTE-compliant KDM files for DCPs created with easyDCP Creator+.

easyDCP KDM Generator has a separate manual that explains the procedure in more detail.

A full commercial version of easyDCP KDM Generator is part of the easyDCP Creator+ product.

Please note: easyDCP KDM Generator is not upgradable to easyDCP KDM Generator+

We recommend our easyDCP KDM Generator+ customers to set-up a second computer serving as backup machine for their (D)KDMs. If used properly, existing (D)KDMs can be recovered and ported to a fresh installation, in case the production machine is not working anymore. The set-up is simple and your existing (D)KDM workflow requires only small changes.

Please see Security backup for (D)KDMs for more details.

To create a complementory backup license please follow these steps:

1. Download the easyDCP KDM Generator+ Installer for your target OS from your license status again and install it on your backup machnine.
2. Request a license and certificate as usual and submit it to easyDCP.com. See also How do I activate my easyDCP Product?.
3. The landing page will show your activated easyDCP KDM Generator+ license. You will have the option to create a complementary license by selecting "Complementary license".
4. You will be redirected to the license status showing your new complementary license.
5. Download the license and certificate data set and import it into your easyDCP KDM Generator+ Backup system.

NOTE: The complementary license is locked for migration. If you need to migrate your easyDCP KDM Generator+ Backup system please contact us at info@easyDCP.com. 

Easier & faster KDM creation:

Create KDMs for several cinemas using easyDCP KDM Generator+

Imagine the following situation:

• Your encrypted DCP incl. activation key (easyDCP-Digest / DKDM) has already been completed.
• Now many KDMs are to be generated as a group (e.g., all KDMs for a distribution area) so that they subsequently e.g. can be sent by e-mail to the cinemas.
• Generating should be done quickly as a mass processing, easily and without time-consuming or faulty manual re-sorting.

Tipps:

• Also works in the standard version of the easyDCP KDM Generator.
• Warning: Do not manually change the filename of the server certificates or KDMs as they will not be able to be assigned in the cinema.

To create KDMs sorted by cinema screens in a tree structure, proceed as follows:

1. First sort your server certificates once outside of easyDCP in a tree structure, e.g. by distribution area (here: "Distribution Area 1"):
   
2. Now start the easyDCP KDM Generator +. First, drag the easyDCP Digest or the DKDM into the field "easyDCP Digest / DKDM". Then simply drag the folder that contains the subfolders with the sorted server certificates into the Server Certificates / Folder field:
   
3. Now activate the options "Options> Replicate easyDCP Digest / DKDM Folder Structure" and "Recursive":
   
4. 4. Finally enter the target directory under "KDM Output Folder" and start the mass generation by clicking on "Generate KDM (s)". The KDM Generator now creates all KDMs and places them in the same structure as the server certificates:
   

The KDMs can now be conveniently processed and e.g. be sent by e-mail to the cinemas.

Please note:
This template was created with easyDCP KDM Generator + Version 1.4.411. Previous versions may not yet include this feature, but newer versions may run slightly differently.

Quick Installation Guide

Welcome to easyDCP!
Thank you for downloading easyDCP Plus, we are sure that this demo will convince you.

You can also install the program parts of easyDCP Plus individually or on different computers.

Installation instructions Windows

System requirements:

Windows 10 (64-bit)

Hardware requirements:

easyDCP Plus can be operated on any standard PC with at least 4 GB of RAM and 200 MB of free space.

Configuration recommendations:

You can also install the individual programs of the software suite in productive operation on different computers and platforms (Windows and MacOS). You can also install the individual program parts in parallel on several computers in order to use them alternately (license roaming).
For 2K DCP processing under Windows, we recommend a minimum configuration with a CPU with 6 cores or more, 8GB RAM and a fast HDD, RAID or SSD.  Performance improvements can be achieved through powerful CUDA-based GPUs. You can also find more information in the manual.

There is no special hardware recommendation for easyDCP KDM Generator+: All commercially available PCs are suitable for the creation of KDMs. There is no particular requirement for computing power.

Other installation instructions:

Different browsers or operating system security settings can trigger warnings during download or installation.
If you have downloaded the programs from www.easyDCP.com, you can run the installation without worries despite the hints.

 

Installation instructions macOS

System requirements:

macOS 10.14 or higher

Hardware requirements:

easyDCP program can be installed on commercial Apple Mac with a minimum configuration of 4GB and 200 MB HDD.
easyDCP programs on Macs with M1 processor are already compatible with Apple’s own emulation with known restriction in easyDCP Player+. 
Native M1 support is coming soon.

Configuration recommendations:

For 2K DCP processing under macOS, we recommend a minimum configuration with a CPU with 8 cores or more, 8 GB RAM and a fast HDD, Raid or SSD.

There is no special hardware recommendation for easyDCP KDM Generator+: All commercially available PCs are suitable for the creation of KDMs. There is no particular requirement for computing power.

Other installation instructions:

Different browsers or security settings in macOS can trigger warnings during download or installation. If you have downloaded the programs from www.easyDCP.com, you can run the installation without worries despite the hints.
Programs must be released at the first start in System Settings > Security > "Open Anyway".

Start in demo mode

To start the individual program demos please click below on „Demo/Offline Mode“.
Please leave the registration fields blank (these are only required in productive operation for registration for license roaming)

Getting Started

easyDCP Creator+

1. Please enter a title for your project
2. Here you can load existing DCPs
3. Here you can load video/audio and subtitle files for your first project
4. With Ctrl/T you can switch from Reel View to Timeline View and back

* In selection "Help" in main menu you will find a detailed manual for the easyDCP Creator+

Optional Tools and Samples:

• easyDCP JPEG2000 Transcoder
  With the Standalone Transcoder you can create JPEG2000 files from different formats DCI  
• Sample files for subtitles
• Sample files for 3D Lookup Tables
• on macOS: easyDCP Creator+ / FinalCutPro Bridge
  Install "Share" presets in Final Cut Pro for easyDCP Creator+

Find more help with questions about the performance assessment of easyDCP Creator+

Limitations in the demo version:  

• Visibly burned-in easyDCP™ logo in all frames
• No loading of (D)KDMs
  (for test encrypted DCPs, please use the proprietary DCP Digest)
• No Supplementals
• No validation report

---

easyDCP Player+

1. Load your DCP here

• In the top menu or right-click anywhere in the "Canvas" field to display the options

* In selection "Help" in main menu you will find a detailed manual for the easyDCP Player+

Optional Tools

• easyDCP DCP Player+ NE

Find more help with questions about the performance assessment of easyDCP Player+

Limitations in the demo version

• Reduced quality and muted audio after 15 seconds of playback
• No Export
• No loading of (D)KDMs (To test encrypted DCPs, please use the proprietary DCP Digest from Creator+)
• No validation report

---

easyDCP KDM Generator+

1. Here you can download the digest file or DKDM (not available in the demo version)
2. Here you can download the/the certificates of the KDM/DKDM receiver
3. Here you can switch to Advanced mode
 

* Under the selection "Help" in main menu you will find a detailed manual for the easyDCP KDM Generator+

Limitations in the demo version

• Maximum KDM validity of 2 days
• No loading of (D)KDMs (To test KDM generation, please use the proprietary DCP digest from easyDCP Creator+)

 

easyDCP Creator+ generates a proprietary DCP digest file along with each encrypted DCP.
This digest file contains all track files keys used for the encryption during the DCP creation process. Whenever one wants to generate KDMs, you can load this digest file into a separate tool called easyDCP KDM Generator.

easyDCP KDM Generator is included in each purchase of easyDCP Creator+.
All you need to do is collect your recipient´s public server certificates and put them into a local folder. Use only the "cert.sha256" files. Usually, they have either a *.crt or *.pem suffix.
In easyDCP KDM Generator, you merely need to load the digest file, point to the folder with the server certificates and specify the start and end dates of the KDMs validity period.

Upon clicking the "Generate" button, easyDCP KDM Generator will create KDMs for all server certificates in a single batch job. Please note, that a digest file may contain multiple compositions, but a KDM only ever contains keys for a single composition. Thus, easyDCP KDM Generator will create x KDMs.

For more details, please refer to the http://www.easydcp.com/sync/manuals/easyDCP_KDM_Generator_User_Manual.pdf.

This FAQ helps you for understanding what is a DKDM and how to generate it or how to use it. 

A Distribution KDM (DKDM) is technically identical to a regular KDM.

The difference is that it targets another mastering station instead of a cinema server.
You can generate a DKDM with easyDCP KDM Generator+. The procedure is identical to generating a regular KDM.

NOTE: Normally, the validity of a DKDM is significantly longer than a KDM distributed to a cinema playback system.  

The other way around is also possible with easyDCP. Your distributor can generate a DKDM to your easyDCP Player+ or easyDCP Creator+ public certificate (they each have theire own certificate). easyDCP Player+ or easyDCP Creator+ are then able to open the encrypted DCP.

Starting with version easyDCP Player+ 1.3 the DCP can be exported and loaded into easyDCP Creator+.

This is explained in the section: I have an existing DCP. Is there a way to import the DCP into easyDCP Creator?".
Please check also: I have an existing DCP. Is there a way to import the DCP into easyDCP Suite?

How to generate KDMs and DKDMs in easyDCP: 

easyDCP KDM Generator(+): see manual section from section 4
easyDCP Creator+: see manual section 10 

easyDCP Creator(+) from 2.2.X, easyDCP Player(+) from 2.0.X and easyDCP KDM Generator(+) from 1.4.1X and above can be directly activated from within the application.

Known limitations:
macOS: Only easyDCP 3.5.5 or higher can be run as of macOS 10.12 (Sierra)
Windows: Only easyDCP 3.4.10 ot higher can run on Windows 10

Please watch our video tutorial or proceed as follows:

1. Download and install the latest installer from your account at www.easyDCP.com license status.
   
        
   
   
2. Select in the installed easyDCP application at "Help" the function "Request License & Certificate" (or use F3)
   
        
   
   
3. Fill out the form according to the instructions displayed and select "Send request". Your license-and-certificate-request will be processed after you log in and have select the license you intend to activate.
   
        
   
        
   
   
4. Then you can download your "License & Certificate" Data Set in the license status pane and install them via Drag and Drop into your easyDCP application.
   Alternatively, you may store the license-and-certificate file (*.easydcp) to a disk and import it into the corresponding easyDCP application by using "Help" the function "Import License & Certificates" (or press F4).
   
        

Note: This way of activating your easyDCP Product is only available from easyDCP Creator(+) 2.2.X, easyDCP Player(+) 2.0.X and easyDCP KDM Generator(+) 1.4.1X or higher.

• If you use a easyDCP Verion 3.6 or higher, you find help here.
• If you use a Version lower as easyDCP Creator(+) 2.2.X, easyDCP Player(+) 2.0.X or easyDCP KDM Generator(+) from 1.4.1X, you find help here.
• If you use an easyDCP Resolve Plugin version, you find help here.
• If you use an easyDCP SAM Rio Plugin version, you find help here.

easyDCP applications require different kinds of certificates

Server Certificates:

Is required to be able to receive KDMs. If a partner wants to send you an encrypted DCP, they will need your public server certificate so that they can issue a DKDM for. 

Signer Certificate:

Will be used to digitally sign content of encrypted DCPs or KDMs. Generally, all DCPs should be digitally signed to ensure that they will be ingested without any problems into a digital cinema server. Only for unencryted DCPs with Interop conformity, a signature is optional.

Which easyDCP application needs which certificates?

How you get your Signer- and Server- certificate?

1. Subscription licenses will receive automatically online for every application on each hardware indiviudal certificates.  
   
   
2. From easyDCP Player(+) 2.0.X, easyDCP Creator(+) 2.2.X, easyDCP KDM Generator 1.4.15(+) and IMF Studio with permanent licenses and Offline License activation.
   

   During „License & Certificate Request“ and activation via webshop www.easydcp.com Signer- and Server Certificates will be provided in "License & Certificate".

   What kind of certificate are required, if at all, depends on the easyDCP application.

3. Older Standalone easyDCP versions
   
   Please use license status on www.easydcp.com: New server certificate/manage certificate
   
   

How I can access to my previous Signer- and Server Certificates?

Please use license status on www.easydcp.com: Manage certificates
This option is available for customers with valid service extension

Comments:

• If you update to a newer easyDCP version, previous certificates should be maintained. When filling in a new license & certificate request, you will be prompted to enter the password that protects your current certificate. If the password can be verified, the new request will contain information, that you don´t need a new certificate.
• Server certificates are bound to the hardware via the system hash. If you migrate to another system, you always need new server certificates.
• Signer certificates are bound to a person rather than to a system.  However, each " License and Certificate set" contains a new signer certificate for technical reasons.

Please note: Every "Certificate Request" will be secured with a password specified by you.

You select the password when you fill in the request and will be prompted to enter it again, whey you import the License & Certificate Set and whenever a KDM is accessed. 

The password cannot be recovered!

The newest easyDCP KDM Generator version 1.4.15 offers a simple support for TDL (Trusted Device List) for e.g. double projection in KDMs.

If a TDL for KDM is required, you only need to import the corresponding projector Certificates in the field " Trusted Device List" available at easyDCP KDM Generator 1.4.15  "Advanced Settings".

DKDMs are used for the exchange of encrypted DCPs between postproduction houses. Processing DKDMs needs the same operation and security requirements that are used in the creation and operation of KDMs for the digital cinema.
easyDCP Creator+ enables to encrypt digital cinema content and the standard accessory easyDCP KDM Generator generates KDMs and DKDMs for the transfer of digital cinema content to postproduction houses or cinemas.

For further information please refer to:

• easyDCP Creator+
• easyDCP KDM Generator

For automatic generating and distribution of KDMs the online service KDM Studio is available at www.dcptools.com. 
KDM Studio is developed by the DCPtools Team based on easyDCP KDM Gnerator+.

This instrucions informs you how to export your public server certificates for internal or external use e.g. for partners who want to create DKDMs for your application.

HINT: Every easyDCP Application uses different Server Certificates. DKDMs issued for one easyDCP application cannot be used in any other easyDCP application.  

The content decryption context menu is available in the

• easyDCP Creator+
• easyDCP Player+
• easyDCP KDM Generator+

The menu option File -> Content Decryption -> Export Public Server Certificate

will copy both the public leaf certificate (easydcpcreator_ _.cert.sha256.crt) and the signature chain (easydcpcreator _ _.chain.sha256.pem) to the selected folder. The signature chain contains the leaf certificate as well as intermediate certificates and the root certificate.
You may safely distribute these certificates to content providers who want to issue a Distribution KDM to your easyDCP + installation.

Note: When issuing (D)KDMs with easyDCP KDM Generator+, place only the leaf certificate file (*.crt) into the server certificate’s folder or just drag and drop it into the corresponding input form.

HINT: Every easyDCP Application uses different Server Certificates. KDMs issued for one easyDCP application cannot be used in any other easyDCP application.  

Usually, on the cinema server manufacturers' FTP servers you can find both the public server certificates and the signature chain that were used to sign the certificates.

If you decide to trust the certificate by examining the signature chain, you only need the server certificate to create a KDM. The server certificate usually has either a *.pem or a *.crt suffix.

easyDCP KDM Generator will accept either, but do not use both.

Furthermore, there may be pairs of certificate and chain that state "mpeg", "sha1" and "sha256".
Like with DCPs, there are SMPTE ("sha256") and Interop ("sha1" / "mpeg") KDMs.

Almost all modern cinema servers prefer SMPTE KDMs - even for Interop DCPs. So mostly the "sha256" version is used.

Only if you surely know your recipient only accepts Interop KDMs, use the "sha1" certificate and remember to check the "Enable Interop mode" option in the easyDCP KDM Generator's options tab.

Please see also: Where can I get the server certificates needed to create the KDMs?

easyDCP 3.6.0 and above will be activated within the application/preferences.

For macOS users: minimum macOS 10.12 is required for easyDCP ≤ 3.8.9 products. easyDCP Plus / IMF Studio ≥ 4.0 require macOS 10.14. 

Please watch our video tutorial or proceed as follows:

1. Download and install the latest installer from your account at www.easyDCP.com license status.
   
        
   
   
2. If Select "Preferences (OSX)" or "Options (WINDOWS)" in the installed easyDCP application option "Activation Status" and select "Request License&Certificates"
   If you have a version ≥ 4.0 start the program in demo mode to enable activation
   
        
   
   
3. Fill out the form according to the instructions displayed and select "Send request". Your license-and-certificate-request will be processed after you log in and have select the license you intend to activate.
   
   
         
   
   
4. Then you can download your "License & Certificate" Data Set from your license status and import it with the corresponding easyDCP option "Import License & Certificates"
   
        

Note: This way of activating your easyDCP Product is only available from easyDCP Version 3.6 or higher.

• If you use a easyDCP Creator(+) from 2.2.X, easyDCP Player(+) from 2.0.X and easyDCP KDM Generator(+) from 1.4.1X till easyDCP Version 3.5.8, you find help here.
• If you use an Version below easyDCP Creator(+) 2.2.X, easyDCP Player(+) 2.0.X and easyDCP KDM Generator(+) 1.4.1X, you find help here.
• If you use an easyDCP Resolve Plugin version, you find help here.
• If you use an easyDCP SAM Rio Plugin version, you find help here.

Licenses of easyDCP software prepared for offline mode can be installed only on one computer system.

Hint: Sometimes this method is required as well to solve license issues when the hashcode doesn't match to the previous license anymore or you have lost the password. 

However, if you need to move the easyDCP license to another computer or operating system you can do this easily using Migration function in the web shop:

1. Login in your account at www.easyDCP.com
2. Select license status
3. Select the product you need to migrate
4. Select: "migrate license"
   
   

easyDCP Resolve Plug-In customers can get additional important informations for migration here. 

After the migration is complete you can generate a new license for the new ware system. Please refer to the following FAQ on how to activate your product.

• How to activate my easyDCP product?
• How to activate my easyDCP Resolve Plugin?
• You find a video tutorial easyDCP from V3.6 - Software Activation Tutorial here.

Note:

• There is a limit of one automatic migration in six months. If you require a second migration within the six months period, please inform us via email why it´s necassary.
• Since server certificates are tied to the system hash, they become inaccessible after a migration. New certificates will be automatically created, but all KDMs issued to the old cerificates will no longer be accessible. Please check our FAQ: Server- and Signer- Certificates.

Migration with older Versions: For version easyDCP Creator(+)2.1.X and older, easyDCP Player(+)1.9.X and older, and easyDCP KDM Generator(+)1.47 and older, be prepared to use the new hashcode of your target hardware/software.

The procedure is different in every country. We can't send you the certificates.

• The best way is to ask the cinema owners directly. They should have current certificates of their projection systems in their screening rooms or tell you the model and serial number.
• Another option is to contact the server manufacturer directly.
• If you have the model and serial number, you can contact the server manufacturer and ask for access to their database.

Note: You can get the demo version here

With the free demo editions of the easyDCP Plus Package almost all functionalities of the full versions can be tested. However, there are the following restrictions:

In easyDCP Creator+

• Visibly burned-in easyDCP™ logo in all frames
• No loading of (D)KDMs (To test encrypted DCPs, please use the proprietary DCP Digest)
• No Supplementals (DCP/IMF)
• No validation report

In easyDCP Player+

• Reduced quality and muted audio after 15 seconds of playback
• No Export
• No loading of (D)KDMs (To test encrypted DCPs, please use the proprietary DCP Digest from Creator+)
• No validation report

In easyDCP KDM Generator+

• Maximum KDM validity of 2 days
• No loading of (D)KDMs (To test KDM generation, please use the proprietary DCP digest from easyDCP Creator+)

Different versions of easyDCP can be installed side-by-side

However be aware that the all share the same user application data folder, where state settings, KDMs, server and signer certificate and license are stored.  

You can download the manual here.

Your service options when using easyDCP products:

Sales support is always free:

All questions regarding the products and their features.

• Purchase of easyDCP Products
• Questions for manage payments,
• Handling for discounts for Non Profit organiasations
• usw. 

Prices for easyDCP products you can find here
Sales support is available for everyone. Please use the Service or contact form in Sales Support

License and Subscription support is always free:

Questions about activation, migration, available updates and upgrades as well as the status of licenses.
All technical service options are available in your web account www.easyDCP.com at My Products  

License support is available for every customer independent from the service status. Please use the Service or contact form in Sales Support

Technical support is free when service status is valid:

 Usage and troubleshooting for all easyDCP Plus / IMF Studio solutions

Technical support requires a valid subscription or a service contract for the respective easyDCP Package/application. Please use the Service or contact form in Technical Support.

Online Roamingsupport is free when service status is valid:

Usage and troublshooting 

Online Roaming requires a valid subscription or a service contract for the respective easyDCP Package/IMF Studio application. Please use the Service or contact form in Technical Support.

Find answers to important questions about your licenses

Subsriptions prolongation for easyDCP Plus:

Customers can at any time extend and renew their subscription. The period to be extended is either seamlessly added to the term of the existing subscription.  If the subscription has already expired, it will be reactivated when the renewal is complete.

Hint: Customers are invited to use the automatic renewal with every purchase. This can also be set up manually afterwards. 
You can find more details here

Service and service extensions for customer with permanent licenses:

Each new purchased easyDCP Plus comes with a valid service contract lasting for 6 months. Within this period, technical service, cost free updates and online roaming for the respective package are included without any additional payment. 

Once the service is about to expire, customers will be notified by e-mail. It is highly recommended to extend the service extension from minimum of 6 months. It will always be appended to the end of the current service-period. If the customer decides for a automatic service subscription the service extendes for another 6 month automatically.

In case a customer decided not to prolong the support and no new version of specific package has been released, it is still possible to get back into normal service. A reactivation (calculated form the regular service fee) for the period between previous service and the date the client wants to get back into support has to be paid. 

If a new version of specific package has been released during a non-support period, no prolongation of the (expired) service is in this moment possible. Here clients have to purchase a onetime fee in order to get the latest version of the easyDCP Plus/IMF Studio package. The update price depends on the date when the previous service extension has ended and the date the client purchased the update for his respective easyDCP Plus/IMF Studio package.
The younger the last license the lower the update fee.
Note: Updates comes without automatic prolongation of service extension.

Hint: Customers are invited to use the  automatic service renewal with every purchase. This can also be set up manually afterwards. You can find more details here

Migrations is always free: 

Valid for Customer using their licenses with Offline Activation:

Migrating your easyDCP/IMF Studio offline licenes to a new hardware or re-activating a license after changing components in your existing hardware is always possible. 
For security reasons, repetitive migrations are blocked for 6 months without prior agreement.   
For further details please check: How can I perform a migration (hardware/operating-system-change)
 

Major and Minor Updates costs are dependent on type and service status see below:

Updates will arrive as needed. Estimate 2 to 6 updates per year.

• Customers with Subscriptions can always download the the latest version and use them immidiately. 
  
  
• Customers with Permanent License and valid service have free access to updated versions of the appropriade package.
  
  
  • Customers using Online Activation can always download the the latest version and use them immidiately.
    
    
  • Customers using Offline Activation maybe needs to request for a new license (see Release Types). 

Release Types: 
Major releases (e.g. 4.2 to 4.3 or e.g. 3.9 to 4.0) - is free when service status is valid
always a new license is required. 
For your support please check: How do I activate my easyDCP Plus oder IMF Studio product

Minor releases (4.2.1 to 4.2.2) - is always free within a major release
do not require a new license. In principle there is no need to update the certificates (signer and/or server) for a software update.

• Customers without valid service follow instrution in section before: Service and service extensions
  
  
• Updates for the easyDCP Resolve plugin are always delivered by Blackmagic Design within the software DaVinci Resolve and are therefore not subject to this procedure. New functions (upgrades) may only be available to customers with a valid service.

Upgrade is free when service status is valid:

available for easyDCP Licenses < 4.0 and easyDCP / IMF Singlelicenes

The button Purchase Upgrade within your web account at Single Licenses shows the available and most cost-effective options for an upgrade.

If your question has not been answered please do not hesitate to contact use on the Service section or contact form in Sales Support

Installation and Activation of older easyDCP, easyDCP Plus and IMF Studio versions

Note: As part of the conversion to the new easyDCP Plus and IMF Studio packages or easyDCP Plus / IMF Studio 4.0 individual licenses we have removed the easyDCP 3.8.9 licenses used for the migration from the previous License Status and as a reference in a own view Show Previous Lizenses.   

General information for using older program versions: 

• Operating mode Online Activation:
  Customers with subscription and permanent license can use older program versions ≥ 4.0 at any time in parallel to the current programs.
   
• Operating mode Offline Activation:
  This is only available for customers with a permanent license.  For technical reasons, the use of program versions ≤ 3.8.9 is only possible in offline mode. You will find further information below⬇︎

Installation and activation of previous easyDCP Plus / IMF Studio applications

1. Log in to the webshop with your access data and choose the overview My Products > License Packages or Subscriptions. 
    
2. Select the current program (e.g.easyDCP Creator+) for which you want to install a previous version.
   
   
3. Select Other Releases.
   
   
      
4. Select the desired version and download the installer for your operating system.
   
   
   
   
5. Activate the program as desired.
   
   
   

➡︎ Installation and Activation of previous easyDCP versions in offline mode

Comments: 

• Older versions for offline licenses can be activated on the same hardware, on which the current program is offline activated.
• Known limitations:
  macOS: macOS: Only easyDCP 3.5.5 to easyDCP 3.8.9 can run from macOS 10.12 (Sierra). easyDCP Plus and IMF Studio reuquires macOS minimum 10.14. 
  Windows: Only easyDCP 3.4.10 or higher can run on Windows 10.

How to get access to the older versions:

1. Log in to the webshop with your access data and choose the overview My easyDCP.
   
   
2. In Single License select the current program (e.g.easyDCP Creator+) for which you want to install a previous version.
   
   
3. Select Other Releases.
   
   
   
   
4. Select the desired version and download it for your operating system.   
   
   
   
   
5. Perform the Offline Activation as usual.
   If you need help with this, you can use the appropriate FAQs.
   
   

Information on licences and certificates

• Which versions require which licenses on the same hardware. 
  
  If the second digit of the version (e.g. 3.4.4) differs from the version currently installed (e.g. 3.5.5) you need a new license. If the 3rd digit (e.g. 3.4.4) matches, the same license can be used.
  
  
• Server Certificates: 
  
  All versions of easyDCP/easyDCP Plus can use the same server certificates, as long the hardware has not been reconfigured or a essential OS update system has taken place.
  
  If you need a new license, the creation of the License & Certificate Request checks whether a server certificate already exists and if then applies it to the newly issued license.
  
  
• Signature Certificates:
  
  In principle, new signature certificates are issued for each license activation.

easyDCP introduces a new and important function with easyDCP+ Version 3.4: easyDCP DCP/IMF-Package Validator

The function is integrated in easyDCP Creator+ and easyDCP Player+. Validation can be performed on encrypted and unencrypted files.  

The easyDCP validation check includes:
- Syntax checks of the metadata
- Compliance check of image and sound files
- Review the current and desired DCP / IMF-Package naming convention 

For immediate diagnosis, the easyDCP Validation Report provides a traffic light view with OK, warnings and "red" for errors.
The easyDCP Validation Report also includes a detailed evaluation. It consists of an HTML file, which can also be opened offline with any browser.
This file provides detailed information on the results of the validation and, if applicable, specific notes on the occurrence of warnings and errors.

A sample of DCP validation can be found here:

To perform a validation:

easyDCP Player+

1. Menu: File > Open Package
2. Select the DCP or IMF package to validate and start it in the playlist
3. Menu: Asset > Validate
4. Press "Start"
5. Dialog Box: Select "Open Report" to open the easyDCP Valdiation Report in your browser   

easyDCP Creator+

1. Coose in first dialog: Open Projekt/Package
2. Select the DCP or IMF package to validate and start it in the playlist
3. Menu: Package > Validate
4. Press "Start"
5. Dialog Box: Select "Open Report" to open the easyDCP Valdiation Report in your browser

Remark: 

• Interested parties can test the function in the respective demoversion but detailed hints are hidden.
• Encrypted DCPs can currently be validated with a valid DKDM.

easyDCP Validation Report as proof of quality:

Fraunhofer IIS provided the essential prerequisite for the DCI Compliance Test Plan. With the new easyDCP Validator you get the perfect tool to run the test plan fully automatically. The conclusive easyDCP Validation Report can be attached to DCP delivery or IMF package delivery as a quality and compliance proof. 

easyDCP Validation verifies the following conformities:

• DCP: according to SMPTE ST 429
• IMF-Package: asccorting to SMPTE ST 2067 

as well as other "Common Practice Tests" which have resulted from years of experience. E.g. Digital Cinema Naming Convention, checks of subtitles outside of the area that can be read by the creator.  

How do I activate the new online roaming services if I have already activated the new easyDCP version in the Offline mode?

• The affected easyDCP Plus / IMF Studio (Version ≥ 4.0.1) is already installed and activated as Offline License.

The reset to the online activation takes place in 2 steps. 

Step 1: Preparation of the easyDCP Plus / IMF Studio Program

• Navigate to Preferences/Options > Activation Status 
• Press the Button "Remove License & Certificates"
  (older versions use alternate "Remove from settings")

• Restart the affected easyDCP program and it will start again in online login mode.
  NOTE: You can't start the application with Online Activation without reset it also in your account settings 

Step 2: Re-activate the online activation in the webshop www.easyDCP.com

1. 1. Login in your account at www.easyDCP.com
   2. Select My Products
   3. Select the product you need to remove offline license 
   4. Select: "Remove Offline License"

Note:

• Since server certificates are tied to the system hash, they become inaccessible after a migration. New certificates will be automatically created, but all KDMs issued to the old cerificates will no longer be accessible. Please check our FAQ: Server- and Signer- Certificates.
• The offline license and legacy licenses you may have activated as parent to the offline license will be removed as well. 
• When may receive the message that migration ist not available. This will occure when you have migrated a offline license within the last 6 month before. 

This FAQ describes important changes related to security enhancements in the latest updates of the macOS 15 and Windows 10-2H22 operating systems. It is required that affected users of easyDCP Plus and IMF Studio update to version 4.2.4 (or higher).

A key point here is that existing signer and server certificates must be replaced with the update to version 4.2.4 (or higher). As a result, previously received KDMs (Key Delivery Messages) or DKDMs (Distribution Key Delivery Messages) become invalid. 
Users should prepare accordingly and ensure that previous KDMs/DKDMs may need to be renewed after this update.

This affects both online and offline-activated easyDCP Plus and IMF Studio 4.2.4 (or higher) applications. 

Procedure for online activation:

• The new 4.2.4 (or higher) application starts as usual with online registration.
• After entering the access data, this message appears: 

• After confirming the “OK” button, the new certificates are created and loaded automatically. 

Procedure for licenses used with offline activation:

• The new easyDCP applications always start with the online activation mode for the first time during the update (even if previous versions ≤ 4.2.3 were already installed in offline mode).
• Switch to demo mode and carry out a offline activation.
• By reactivating, you will receive a License & Certificate Data Set with new certificates. 

This update is also recommended for users who are not yet using the updated operating systems. As far as the operating system allows, you can use earlier easyDCP Plus and/or IMF Studio versions in parallel to the new version and continue to use the previous certificates. 
 

We would also like to take attention to the current compatibility information:
EASYDCP PLUS AND IMF STUDIO OS COMPATIBILITY NOTES

If you require individual support, please contact info@easydcp.com

Licenses for easyDCP software can be activated in online mode on several computer systems (roaming). This applies as long as the service is valid.
When the service expires, the roamaing option is locked and activation is restricted to the last hardware on which the application was used.

This status is shown in your account at My Products:

You can unlock and reactivate the roaming service by extending your service.  

However, if you decline to extend the service and need to move the easyDCP application to another computer or operating system you can do this easily using Migration function in the web shop:

1. Login in your account at www.easyDCP.com
2. Select My Products
3. Select the product you need to migrate
4. Select: "migrate license"

After the migration is complete you can login on a new device. Next online activation assign the license to be used from this device until a new migration is required or you have extended your service.

Note:

• There is a limit of one automatic migration in six months. If you require a second migration within the six months period, please inform us via email why it´s necassary.
• Since server certificates are tied to the system hash, they become inaccessible after a migration. New certificates will be automatically created, but all KDMs issued to the old cerificates will no longer be accessible. Please check our FAQ: Server- and Signer- Certificates.

The generation of personalized signer certificates for certain easyDCP applications is a free service provided by Fraunhofer IIS.

New personalized signer certificates will be issued with every License & Certificate Request during new installation of after migration of the software.

Requirements to get personalized signer certificates issued by Fraunhofer IIS are:

• The email-domain used for your web-account at http://www.easyDCP.com and the requested domain within the License & Certificate Set-request must match.
• Requested domain for validation is not a public address like e. g. gmail.com, t-online.de etc. Blacklist is supported.
• If a comprehensible reason exist that email domain and requested domain cannot match please contact info@easydcp.com 

There can be many reasons that subtitles cannot be displayed.

easyDCP Player performs a whole range of checks when it loads the subtiteles.

It will automatically verify that the XML document´s structure meets the specifications and it will also make sure that all characters used in the subtitle document are actually present in the enclosed font file. (Font)

If any potential issues were identified, they will be shown in the log window.

In short, make sure no warnings are raised when the DCP is opened by eayDCP Player.