Filmlexikon.
Support
KDM / Key Delivery Message / DCP Key
Post · Distribution

KDM / Key Delivery Message / DCP Key

Murnau AI illustration

Key Delivery Message – encrypted XML file containing cryptographic keys required to decrypt and play a specific DCP on a specific cinema server, linking content access to authorized hardware and time windows.

What is a KDM?

A KDM (Key Delivery Message) is an encrypted XML file that contains the cryptographic keys to decrypt and play a DCP (Digital Cinema Package) on a specific cinema server. Without a valid KDM, the film cannot be played.

Basic Principle

AspectDescription
PurposeContent decryption
FormatXML (encrypted)
BindingServer-specific
Time WindowPeriod of validity

Security Concept

ElementFunction
EncryptionAES-128
CertificateServer certificate
Unique KeyPer server
Time LockStart/End

KDM Contents

InformationDescription
Content KeyDecryption key
ValidityPeriod of validity
TargetServer certificate
Content IDDCP reference

Workflow

StepDescription
1DCP created (encrypted)
2Cinema certificate obtained
3KDM generated
4KDM delivered to cinema

KDM Generation

ElementRequirement
DKDMDistribution Master Key
CertificateFrom the target server
Time WindowPlayback period
SoftwareKDM generator

Server Certificates

ComponentDescription
Public KeyFor encryption
Server IDUnique identifier
ChainCertificate chain
TrustedDCI-compliant

Period of Validity

AspectTypical
StartPremiere date
EndEvaluation end
FlexibilityDaily precision
ExtensionNew KDM required

KDM Types

TypeApplication
FeatureMain film
TrailerPromotional content
TestTechnical check
ForensicWith watermark

DKDM

AspectDescription
Distribution KDMMaster key
FunctionGenerate KDMs
SecurityStrictly guarded
IssuanceFrom mastering

Delivery Methods

MethodDescription
EmailStandard
PortalOnline systems
USBManual
AutomatedTMS integration

TMS Integration

FunctionDescription
Theatre ManagementCentralized management
Auto-IngestAutomatic ingestion
MonitoringStatus monitoring
AlertsExpiration warnings

Common Problems

ProblemCause
Invalid CertificateIncorrect certificate
Time WindowOutside validity period
Wrong ServerKDM for a different server
Corrupt FileTransmission error

Troubleshooting

IssueSolution
Not playableCheck certificate
ExpiredNew KDM
Incorrect timeCheck server clock
UnreadableRe-transfer

Time Zone Handling

AspectStandard
UTCOften used
LocalSome systems
DocumentationImportant
BufferSchedule time buffer

Distribution Services

ProviderService
DeluxeKDM management
CinedigmDistribution
Arts AllianceKDM delivery
DCMBooking integration

Costs

AspectFactor
Per KDMUsually minimal
ServiceDistribution fee
VolumeDiscounts possible
RushSurcharge

Security Aspects

MeasureDescription
Encryption2048-bit RSA
Unique KeysPer server/content
Audit TrailTraceable
RevocationNot possible

Forensic Marking

FunctionDescription
WatermarkIn image/audio
UniquePer cinema
InvisibleNot visible
TrackingFor piracy

Standards

StandardDescription
SMPTEST 430-1
DCICompliance
Interop/SMPTEBoth formats
CertificateX.509

Best Practices

PracticeReason
Early orderingTime for QC
Certificate listKeep up-to-date
Buffer timePlan buffer time
DocumentationTrack all KDMs

Today

KDMs are the backbone of secure digital cinema distribution. Every DCP screening requires a valid, server-specific key. The system protects content rights and allows precise control over exhibition windows – essential for the modern film industry.

Report an error
From the Filmfarm ecosystem

Understand visual language, budget productions, connect crew.

The Lexikon is part of the Filmfarm ecosystem — alongside budgeting (FilmBalance), an industry magazine (FilmCircus) and crew networking (FilmCall, CrewMesh). One shared vocabulary for the whole production.

FilmFarm FilmRadarComing soonFilmPulseComing soonFilmNumbersComing soonFilmCapitalComing soonFilmLabComing soonFilmBalanceComing soonFilmCircusComing soon