Integration with Key Per Track and Key Rotation combined

Before activating key per track combined with key rotation, it is recommanded to contact a Nagra representative to help with the integration.

1. Guideline on Key Per Track combined with Key Rotation

1. Key Per Track and Key Rotation can both be activated at the same time by creating key(s) with tracks and periods.

2. When both features are activated, both rules apply at the same time.

   1. Integration with Key Per Track

   2. Integration with Key Rotation

3. It is possible to activate Key Per Track on top of Key Rotation on existing contents by creating new key(s) with track(s) and period(s) or updating an existing key with a period.

4. It is possible to activate Key Rotation on top of Key Per Track on existing contents by creating new key(s) with track(s) and period(s) or updating an existing key with a track(s).

5. The activation of Key Per Track and Key Rotation can be done per content, encryption scheme and tracks.

   1. The encryption method is defined in the key requests sent to the key server

      1. Three possible values, which are considered as independant : cbcs, cenc, unspecified (not set)

   2. It is possible to activate both features on specific encryption schemes only.

      1. Not setting the encryption method is considered also as an independant value.

6. The keys are filtered per encryption scheme, a single license cannot contain a mix of keys associated to CBCS, CENC and unspecified encryption.

7. Combinations of keys with tracks only and tracks with periods are possible.

   1. Example : The SD track rotates every day but UHD track doesn’t rotate.

   2. In this case, keys associated to tracks only are always considered valid whereas keys with periods are filtered according to the key rotation rules.