DRM Hack for CPIX / SPEKE

I have almost gotten DRM to work all devices with my DRM Provider axinom by leveraging the Verimatrix VCAS CPIX integration for DRM and working some majic with an AWS API Gateway to route the CPIX message to my providers servers instead of Verimatrix which appears to work just fine. The issue I'm running into is nothing for Apple Fairplay works i.e. VOD or Live streams the decryption process fails. Widevine works just fine for both DASH and the new HLS implementation. I have identified the specific issue that is preventing the Apple Fairplay from working and that is in the CAMF m3u8 files under the EXE-X-KEY line the URI="" is blank. I created some test m3u8 files by hand where I have entered the value skd://{keyid}:{IV} and apple fairplay works at that point. My question is assuming this was not a hackjob and this really was a Verimatrix integration would uri parameter in the m3u8 file fill in correctly as done in the test above.

Hello Aaron,

Nimble reads EXT-X-KEY value for FairPlay from URIExtXKey or HLSSignalingData in CPIX response, does axinom send anything in those fields? Where did you get skd://{keyid}:{IV} value for specific stream to insert into test m3u8 files?

I pulled the data from the EXT-X-Key line that I am assuming is for the Widevine HLS Setup in the same m3u8 file when I created my manual test files. Based on your information above I can confirm with the CPIX data that nimble sends the axinom API doesn't return the URIExtXKey. Doing some testing with postman to the axinom API I was able to determine if the Fairplay section in the cpix message includes <cpix:URIExtXKey /> tag the data does then get returned. Looks like I'm going to have to do a little more coding to get this to work. I appreciated the help. I don't think I would have figured that one out on my own.

Hello Aaron,

Nimble 4.1.1-8 should be able to fetch encryption keys from Axinom directly without proxy, try setting up DRM with "type = axinom" and also set axinom_tenant_id & axinom_management_key options in the corresponding section in drm.conf.

Aaron, please find the setup description in this article: https://blog.wmspanel.com/2024/03/axinom-drm.html