Fails to decrypt DCP using DKDM

[JoeHsu]

Hi guys:

I work for a distributor where we would need to decrypt DCP in the future, so I wanted to test out the procedure.
I've been trying to encrypt a DCP on computer A, and then decrypt it on computer B.
However, whenever I try to decrypt the DCP using the DKDM I've created, an error message shows up saying:

This KDM was not made for DCP-o-matic's decryption certificate - Could not decrypt KDM (error:02000072 or 02000079)

For some context, this is what I've been doing:
Make the encrypted DCP → Make DKDMs (where I've tried to use the decryption certificate and the chain certificate, but neither worked) → Import the encrypted DCP on computer B → add KDM

I know there must be something I've done wrong, just couldn't figure out what it is. Would really appreciate your help.

Joe

[Carsten]

In DCP-o-matic A, you need to export the decryption/leaf certificate.

Bildschirmfoto 2024-06-04 um 11.52.58.png

In DCP-o-matic B, you need to create a Screen 'DCP-o-matic A', and assign that decryption/leaf certificate from DCP-o-matic A to it.
Then you can create KDMs on DCP-o-matic B towards DCP-o-matic A, and play the encrypted DCP only on DCP-o-matic A.