Configure DRM ( settings in the RMS Console to enable multi-DRM content protection. This setup establishes secure connections between your EZDRM account and the RMS infrastructure, unlocking Widevine, PlayReady, and FairPlay encryption capabilities.
Complete this configuration regardless of your implementation method — whether using the RMS Console interface, API calls, or SDK integration. All DRM protection workflows require these settings to be configured before encrypting your media assets.
If you have multiple RMS accounts, you'll need to complete this configuration process separately for each account using the corresponding account credentials and domain.
In this article:
Before you begin
- Access the RMS Console and locate your domain: RMS Console: Start Guide
- Get an account with EZDRM, also available in the Azure Marketplace.
Getting started
Provide the necessary credentials for DRM protection:
1. In the RMS Console, go to the Account Settings tab > locate DRM settings.
2. Click ✏️ and enter your EZDRM Username and Password.
3. Configure the platform-specific settings based on your protection needs: insert the values of the Widevine profile ID, PlayReady Profile ID, and FairPlay Asset ID by following the steps below.
You only need to configure the DRM types relevant to your content needs:
- Widevine for Android/Chrome
- PlayReady for Edge/Windows
- FairPlay for Safari (iOS/macOS)
For full compatibility across devices, it's recommended to use DASH for Widevine and PlayReady, and HLS for FairPlay.
Widevine
Support encrypted playback on Android/Chrome.
1. Configure your EZDRM Widevine account.
2. In your EZDRM portal, navigate to the Widevine settings.
3. Enter the following URL as the Authorization URL:
https://[rms_domain]/drmservice/widevine
Replace
[rms_domain]with your actual RMS domain:
This domain is the unique identifier of your specific RMS deployment in the cloud infrastructure.
Use it for FairPlay and PlayReady configuration in further steps as well.
4. Click UPDATE to save your authorization URL.
5. In your EZDRM account, locate your Widevine profile ID.
6. Copy only the last 6 characters of your profile ID (highlighted in red in the example below):
7. Return to RMS Console > Account Settings > DRM settings.
8. Paste these 6 characters into the Widevine Profile ID field.
PlayReady
Support encrypted playback on Edge/Windows.
1. Configure your EZDRM PlayReady account.
2. In your EZDRM portal, navigate to the PlayReady settings.
3. Enter the following URL as the Authorization URL:
https://[rms_domain]/drmservice/playready
4. Click UPDATE to save your authorization URL.
5. In your EZDRM account, locate your PlayReady profile ID.
6. Copy only the last 6 characters of your profile ID (highlighted in red in the example below):
7. Return to RMS Console > Account Settings > DRM settings.
8. Paste these 6 characters into the Widevine Profile ID field.
FairPlay
Support encrypted playback on Safari (iOS/macOS).
1. Get a Certificate from Apple and configure your EZDRM FairPlay account (instructions can be found in your EZDRM account).
2. When uploading the Certificate to EZDRM, enter the following URL as the AUTH URL:
https://[rms_domain]/drmservice/fairplay
3. Generate a URL to the Certificate and store it with limited or protected access
Tip: Use Azure storage blob with SAS token or restricted access settings.
4. Generate an AssetID for RMS integration by sending a GET request to:
http://cpix.ezdrm.com/kalturagetasset.aspx?u=[username]&p=[password]Replace [username] and [password] with your EZDRM credentials.
5. Locate the AssetID in your EZDRM account:
6. Return to RMS Console > Account Settings > DRM settings.
7. Paste the Asset ID into the FairPlay Asset ID field.
Saving DRM settings
After all fields are pasted, click :
Allow several minutes for the DRM settings to propagate through the system after saving the values.
DRM settings are integrated with the RMS API infrastructure for your account. The system has secure communication channels between your EZDRM account and RMS. The RMS Console can now apply platform-specific protection policies when you create locators.
Next steps
-
Apply your configured DRM settings to protect your content: RMS Console: Encrypt media with Multi-DRM