Fairplay Certificate Registration Tutorial

A requirement to protect content on apple devices is to use Apple's FairPlay Streaming DRM.

Overview

To use Apple's FairPlay Streaming (FPS) DRM, you will need to aquire a FPS Deployment Package from Apple and provide us with the following data. As well as own a Apple Developer Account.

- FPS Certificate file (.der or .cer)
- Private key file (.pem)
- Private key password
- Application secret key (ASK)

Step 1: Create an Apple Developer Account and request for the Deployment Package

You will need to create an Apple Developer Account ($99USD per year) to be able to aquire a FPS Deployment Package. To signup for a Apple Developer account please head over to https://developer.apple.com/programs/enroll/ and enrol as an Individual.

Next, Please go to https://developer.apple.com/contact/fps/ and fill out the details accordingly.

Website: (enter your website url).

Streaming Distribution Partner Name: ProofProtect

Streaming Distribution Partner Website: https://proofprotect.com.au/

Is there a working FPS development server in which to use the FPS credentials? Yes.

Your content: (describe your content, that you are the content owner, and why you would like to protect your media).

Your Company: (describe what your company does and the business relationship that you will have with us. i.e. we (proofprotect) will manage help manage all your media.)

Once you submit the form you may need to wait 3-5 business days whilst Apple reviews your application. During this process if they ask if you have completed the implementation and testing of the Key Server Module (KSM) you should respond with the following 'I am using a 3rd party DRM company (ProofProtect) and the company has already built and tested the KSM'

Step 2: Creating the relevant files.

Once you have been approved by Apple, you may complete the following. If you already have Apple Fairplay Certificate files, please skip this section.

If at anytime these steps may seem confusing you may contact us at info@proofprotect.com.au and we can help with creating the certificates.

  1. Head over to https://proofprotect.com.au/app/generateCert/ and enter a password in the input field.

2. Simply click download on the 'Certificate Signing Request file. This file will be used by Apple to generate the Application Secret Key (ASK).

  1. Once the Certificate Signing Request has been downloaded head over to https://developer.apple.com/account/resources/certificates/add and under 'Services' choose the FairPlay Streaming Certificate and press 'Continue' in the top right.

3. Then click Choose File and upload the file named "certreq.csr" that was generated in the previous steps, then click continue.

4. After that, Copy the Application Secret Key (ASK) to somewhere safe. (Do not loose this as you will not be able to create another one and you will need this to use ProofProtect)

5. Once you have written down the ASK key to a safe location and entered it into the text boxes, click "Continue" and then click "Generate". This will create a certificate with the FairPlay Streaming type displayed in the Certificate list. Simply click onto the certificate.

6. Then click "download" in the top right.

7. After you have downloaded the certificate head back to https://proofprotect.com.au/app/generateCert and upload the 'fairplay.cer' and enter the Application Secret Key (ASK) into the text box. As a precaution the we automatically check to make sure that the certificate that you just downloaded matches with our generated certificates. However, we cannot automatically test to see if you have entered the correct 'ASK', to verify that it is setup correctly please use an apple device either iphone or mac and head to the same page 'https://proofprotect.com.au/app/generateCert' and click the 'test key' button. If the video is able to play the ASK is correct, please click the prompt 'Ask verified to continue'. If the video is unable to play, please re-enter the ASK and try again.

Step 3: Uploading your existing FPS credentials on ProofProtect

If you do not have any FPS credentials please refer to the previous step.

  1. Log into your ProofProtect Account.

  2. Go to Settings and upload the relevant files under the "Fairplay Credentials" section.

Once you click submit the Password of the Private key will be checked and verified that they are correct, if not you will be asked to provide them again. If all the certificates are correct they will be locked to prevent you from uploading any other files.

The ASK key however will remain changeable incase you enter the wrong key. Please note that if you enter the ASK key incorrectly the content wont play properly.

Last updated