CineCert’s Waimea Key Management System is a secure hardware device for the creation of encryption keys and Key Delivery Messages (KDMs), and for the management of libraries of digital identity certificates. Waimea is designed to integrate seamlessly into your existing workflow by providing all functions using remote procedure call (RPC). System redundancy is enhanced by secure, automated peering with off-site Waimea servers.
The Waimea D-Cinema Key Management Server is a mature, enterprise-class KDM processing solution. Top-tier distribution providers rely every day on Waimea for precise operations on d-cinema Key Delivery Messages. Detailed, personal support is provided by our knowledgable technical staff.
Waimea provides the following critical functions for mastering, authoring and distribution of Digital Cinema Packages (DCP):
Waimea will ingest and validate a d-cinema device certificate using chain elements previously loaded onto the server via the same process. Once a certificate has been loaded, it will be available for KDM authoring operations. Waimea supports certificates in both SMPTE 430-2 and JPEG Interop formats.
DKDM Storage & Validation
Waimea stores Distribution KDMs (DKDMs) for future use in KDM authoring. DKDMs are analyzed for errors during ingest. Waimea limits KDM authoring to the time limits present in the source DKDM.
Using DKDM and a target certificate already ingested, Waimea will create a KDM for the target device. Waimea allows both single-source DKDM with feed-through of DKDM metadata such as CPL identity and forensic marking flags (“clone” mode) and also multiple source DKDMs with a source CPL to be used to produce a KDM with a composite set of keys and customized metadata (Create mode). For users supporting legacy devices, Waimea automatically selects the correct KDM format (SMPTE or JPEG Interop) based on the target certificate format.
Waimea is supplied with client libraries to allow customers’ applications to request services from the server. Supported API languages and platforms include:
- C++ source code (win32/Unix)
- Python (win32, Unix)
- REST (any HTTPS client)