Media Excel HERO Integration Guide

DoveRunner Multi-DRM service offers seamless integration with Media Excel HERO 6000 and HERO v5 products, enabling customers to configure DRM encryption for live streams. This integration allows for the protection of CMAF (HLS/DASH) outputs using industry-standard encryption schemes.

This guide provides step-by-step instructions to assist customers in integrating DoveRunner Multi-DRM with Media Excel HERO products.

Prerequisites

• Active accounts on DoveRunner Multi-DRM service and Media Excel products
• Familiarity with Media Excel HERO 6000/v5 interface
• Basic understanding of DRM encryption concepts (CENC, CBCS)
• Your DoveRunner KMS Token

Live Packaging Configuration

Configure your channel and add a CMAF output via the Media Excel HERO web GUI. To enable DRM, you must configure the DRM Settings within the Output options.

Output Configuration

1. Navigate to your Channel configuration.
2. Add or Edit a CMAF output.
3. Scroll to the DRM Settings section.
4. Enter the relevant parameters as defined in the table below:

Field	Value	Description
DRM Type	Pallycon	Select Pallycon from the dropdown menu.
DRM Encryption scheme	CENC or CBCS	Select CENC for Widevine/PlayReady (DASH) or CBCS for FairPlay (HLS).
DRM Server URL	https://drm-kms.doverunner.com/v2/cpix/doverunner/getKey/{KMS token}	The Key Management Server URL. Replace {KMS token} with your specific DoveRunner KMS token.
DRM Content ID	Your Content ID	A unique identifier for the content (e.g., my-live-stream-01).

Note

For detailed information on obtaining your KMS token, refer to the Multi-DRM > DRM Settings section of the DoveRunner Console. You will need your login credentials to access this information.

Detailed Parameter Settings

Ensure the following Output Options are configured correctly to support the DRM workflow:

• Output Type: CMAF
• Base Publishing Point: videos/YourStreamName
• Segment Naming: Sequential
• HEVC CodecTag: hvc1 (if applicable)
• Use UTC in “tfdt”: Unchecked (or based on preference)

Once the parameters are entered, click the Save button to apply the configuration.

---

Test Playback

After configuring the output, you can verify the integration by generating a license token and testing playback using the DoveRunner demo player.

1. Generate a License Token

Open the License token generator in the DoveRunner Lab Playground to generate a test license token.

Fill in the fields as follows:

• Site ID, Site key, Access key: Found in DoveRunner Console > Multi-DRM > DRM Settings.
• DRM type: Select Widevine, PlayReady, or FairPlay.
• Content ID (CID): Input the exact Content ID used in the HERO Output configuration.
• User ID: Arbitrary user ID (e.g., test-user).
• Timestamp (GMT): Already set to the current time; select Now to refresh it. A token is valid for 600 seconds by default.
• Key rotation: true or false depending on your setup.

Click Generate token to generate the license token string.

2. Launch Web Browser

Select the recommended browser for the DRM type you verify:

DRM	Recommended Browser
Widevine	Google Chrome
PlayReady	Microsoft Edge
FairPlay	Apple Safari

3. Test Playback

Open the DRM playback tester in the DoveRunner Lab Playground, choose Custom content, and enter the information for the DRM type below. The tester runs on lab.doverunner.com, so your CDN must serve the content over https:// and allow cross-origin (CORS) requests from that site.

For Widevine & PlayReady

• License URL: Already filled in with https://drm-license.doverunner.com/ri/licenseManager.do.
• DASH manifest URL: Enter your manifest URL.
  • Format: {CDN_URL}/encrypted-HD-video-ToS-1920-short.mpd
• License token (pallycon-customdata-v2): Paste the License Token generated in Step 1.

For FairPlay

• License URL: Already filled in with https://drm-license.doverunner.com/ri/licenseManager.do.
• HLS manifest URL: Enter your manifest URL.
  • Format: {CDN_URL}/encrypted-HD-video-ToS-1920-short.m3u8
• FPS certificate URL (Safari only): Enter your FPS certificate URL.
  • Note: For details on the FPS cert, refer to the FairPlay Cert Registration guide.
• License token (pallycon-customdata-v2): Paste the License Token generated in Step 1.

Start Streaming

Select Load custom content. When the status shows ready, click Play to verify that the content plays back correctly.

---

Contact Information

For further technical assistance regarding the integration, please contact Media Excel or DoveRunner support.

• Media Excel Support: support@mediaexcel.com
• DoveRunner Support: Help Center