Page 3 of 3

Re: Import server certificate... (KDM Creator)

Posted: Sun Dec 01, 2019 3:21 pm
by carl
OK, I added a note about that in the tracker. Don't be shy about adding things there yourself if you have feature requests/ideas :)

Re: Import server certificate... (KDM Creator)

Posted: Sun Dec 01, 2019 5:23 pm
by Carsten
kcsim99 wrote: Sun Dec 01, 2019 2:11 pm The database thing is good, but sometimes, we just need to issue KDMs for a group of cinemas once, and it’s a pain having to set them up into a database before the KDMs can be issued.

How do you distribute the KDMs then? Send a huge ZIP containing all the KDMs to all cinemas/servers?
The idea of the database is also that you can direct specific KDMs to specific transport/receivers.

Admittedly, if this was a feature of KDM creator, it would not clog up the general GUI.

A way to support this would be to offer not only a list of cinemas/screens on the left side, but to have an additional folder option there containing all the certs. The resulting KDMs could then all be written to a single folder/ZIP, and email/time zone options would be ignored. It would probably fail for some dual projector setups, but...

Still, it is always best to have a proper cert database. Maybe there is a way for faster cert import/database generation. Like a batch import - add 'screens'.

- Carsten

Re: Import server certificate... (KDM Creator)

Posted: Sun Dec 01, 2019 11:29 pm
by kcsim99
Carsten wrote: Sun Dec 01, 2019 5:23 pm
How do you distribute the KDMs then? Send a huge ZIP containing all the KDMs to all cinemas/servers?
The idea of the database is also that you can direct specific KDMs to specific transport/receivers.
Hi there!

Yes, the cinema chain would email me a zip file with all the PEM files of the screens in separate directories. So what I would do is to have the KDMs issued separately into the original directories and email it back to them. Well, it’s not that big a zip file, perhaps a few MB.

I agree the database is an excellent feature to keep everything neat and tidy if you regularly issue KDMs to them.
Carsten wrote: Sun Dec 01, 2019 5:23 pm
A way to support this would be to offer not only a list of cinemas/screens on the left side, but to have an additional folder option there containing all the certs. The resulting KDMs could then all be written to a single folder/ZIP, and email/time zone options would be ignored. It would probably fail for some dual projector setups, but...
Yes that would be excellent. And perhaps an option to have the KDMs in the respective folders of the PEM files.

Why would the KDMs fail for the dual projector setups if KDMs are issued for both of the projectors? I’m sorry but I’ve never had much experience with dual projectors.

Re: Import server certificate... (KDM Creator)

Posted: Mon Dec 02, 2019 12:06 am
by Carsten
Using the folder method, you would only create on a 'one KDM per certificate' basis. Some setups are more complicated than that. The database would allow to cater for these specific issues.



- Carsten

Re: Import server certificate... (KDM Creator)

Posted: Mon Jan 06, 2020 3:22 pm
by MrsDCP
Carsten wrote: Wed Aug 14, 2019 1:51 pm Additional certs can be added under 'other trusted devices'. Some dual systems (like slaved secondary servers) may need their own individual secondary KDM.
Dear Carsten,

I'm wondering if there's not a bug with those dual KDMs... I had the 2.14.8 version for a moment now and it seems it is the same problem with the 2.14.19 version.
From what I can see, it's always generating that 2jmj7l5rSw0yVb/vlWAYkK/YBwk= no matter what the "trusted device" is.
Please see those 2 pictures joined.

What do you think?

TNX ;-)
2jmj7_2.png
2jmj7_2.png (99.94 KiB) Viewed 5866 times
2jmj7_1.png
2jmj7_1.png (84.48 KiB) Viewed 5866 times

Re: Import server certificate... (KDM Creator)

Posted: Mon Jan 06, 2020 3:27 pm
by carl
The 2jm7l5r... thumbprint is a magic "assume trust" thumbprint. As it stands in DoM if you want to see the thumbprints for your specific devices you will need to select the "Multiple Modified Transitional 1" KDM type.

Re: Import server certificate... (KDM Creator)

Posted: Mon Jan 06, 2020 3:38 pm
by MrsDCP
Yes, indeed!

<AuthorizedDeviceInfo>
<DeviceListIdentifier>urn:uuid:4b279ef2-9437-4427-bcf6-4ef1d38aef47</DeviceListIdentifier>
<DeviceListDescription>IMS-313498.DC.DOLPHIN.DC2.SMPTE</DeviceListDescription>
<DeviceList>
<CertificateThumbprint>0H53BLuaJ6Xdyn04UjRFqs8ys2o=</CertificateThumbprint>
</DeviceList>
</AuthorizedDeviceInfo>


I was thinking of this "problem" because the KDMs with 2jmj... are not working. It should come from something/somewhere else... :mrgreen:

Thank you for being so efficient. ;-)

Re: Import server certificate... (KDM Creator)

Posted: Mon Jan 06, 2020 3:48 pm
by carl
This stuff hasn't been very widely tested so I'd be interested to hear how you get on...

Re: Import server certificate... (KDM Creator)

Posted: Mon Jan 06, 2020 3:53 pm
by MrsDCP
Might be a silly question but:
is it supposed to work with this magic 2jmj?

Or is it because "Multiple KDM type" was not used that it doesn't work?

;-)