Film-Tech Forum ARCHIVE: .PEM File?

This is topic .PEM File? in forum Digital Cinema Forum at Film-Tech Forum ARCHIVE.

To visit this topic, use this URL:
https://ft-forum.com/ft/cgi-bin/ubb/ultimatebb.cgi?ubb=get_topic;f=16;t=002709

Posted by Bradley J Sime (Member # 9423) on 05-31-2016, 07:47 PM:

An Iranian distributor says he needs our PEM files in order to make KDM's. What the hell is he talking about?

Posted by Jason Raftery (Member # 6291) on 05-31-2016, 07:54 PM:

He's asking for the server's certificate. What make/model server do you have?

Posted by Dave Macaulay (Member # 813) on 05-31-2016, 07:54 PM:

These are the certificate files for the server. To play an encrypted movie your server needs a KDM generated using these files. The encryption system uses private/public keys: the distributor encrypts it with your public key (those files) and you decrypt it with your private key (securely stored in your server).
Different servers have them available in different places. Some (ie Doremi) have them available on an FTP server so if a distributor has the eSN they can get the cert files. All have some way to get them from the server to provide to distributors.

Posted by Bradley J Sime (Member # 9423) on 05-31-2016, 07:59 PM:

QNAP QTS

Posted by Carsten Kurz (Member # 5396) on 06-01-2016, 06:25 AM:

QNAP ist not a DCI server, but a storage device. What is your server brand and type - Dolby, Doremi, GDC, etc.?

Some servers allow you to extract the device certificates locally on your own. Some will need to relate the server serial number with a certificate database.

Every cinema operator should have their server/media block serial numbers and certificate files stored on a computer, USB-Stick, etc. for easy access and forwarding.

- Carsten

Posted by Marco Giustini (Member # 4544) on 06-01-2016, 07:19 AM:

Every distributor should have access to the certificates. They should only ask you serial number and the brand of your server.

Posted by Jim Cassedy (Member # 4115) on 06-01-2016, 09:55 AM:

As Carsten said, the QNAP is only a network storage device.

We'd need to know more about your system to answer your question.

Do you by any chance have the QNAP connected to a CHRISTIE
projector, which has a built-in IMB/server?

If so, you can extract your certificate this way:

1. Insert a USB flash drive in the USB port on the
side of the touch panel controller (TPC).
2. Tap Menu > Christie IMB > System.
3. Tap General > Settings.
4. Tap Certificate.
5. Select a certificate to download.
6. Tap Download. The certificate is saved as SM.perm or Log.perm.

I've had to do this once or twice for a similar system.

Posted by Monte L Fullmer (Member # 2797) on 06-02-2016, 01:29 AM:

QNAP is a manufacturer name for a NAS .. is what we use for our Barco Escape system to transfer files from the LMS to the NAS, then to the Barco ICMP server.

Posted by Leslie Hartmier (Member # 7053) on 06-07-2016, 05:41 PM:

Have you sorted out your issue yet, Mr. Sime?