Configuration
Security configurations
Apple FairPlay

Configuring Apple FairPlay for Enhanced and Adaptive Protection

🔒

Configuring Apple FairPlay is an option exclusively available to enterprise customers. This feature enables enhanced and adaptive protection for content, making it a requirement for serving highly protected content to Apple devices, including Apple TV.

Apple FairPlay Streaming (FPS) is essential for delivering content securely on Apple platforms. To configure FairPlay with Fastevo MP2, you must first obtain your Production Deployment credentials from Apple. These credentials are necessary for setting up FairPlay and include:

  • A self-generated private key (PEM format)
  • An Application Secret Key (ASk) provided by Apple
  • A public certificate generated by Apple

You can request your Production Deployment credentials through Apple's developer portal (opens in a new tab) or contact your account manager for assistance.

Preparing Your Credentials

Before configuring FairPlay in Fastevo MP2, you need to convert your ASk and keys to the required format:

  1. ASk Conversion: The ASk is provided as a hexadecimal string. Convert it from hexadecimal to a byte array and then to Base64 using this CyberChef recipe (opens in a new tab).
  2. Keys Conversion: Convert your self-generated private key and the public certificate to Base64. Use this CyberChef recipe (opens in a new tab) by dragging and dropping the file into the input field.

Setting FairPlay Credentials in Fastevo MP2

To apply your FairPlay credentials to Fastevo MP2, send a PUT request to the following endpoint:

PUT https://api.fastevo.net/api/v1/projects/mediaProtection/configurations/protection/fairplay

Include the following JSON in the request body:

{
  "askInBase64": "yourFairplayAskInBase64",
  "publicDerInBase64": "yourFairplayPublicDerInBase64",
  "privateKeyInBase64": "yourFairplayPrivateKeyPemInBase64"
}

Replace the placeholders with your converted credentials in Base64 format.

Managing FairPlay Credentials

  • To delete your FairPlay credentials, send a DELETE request to the same endpoint.
  • To check if FairPlay is enabled, a GET request to the endpoint will return { "enabled": true } if enabled. If not enabled, the response will be { "enabled": false }.

By configuring Apple FairPlay, you enhance the protection for your content on Apple devices, ensuring a secure and compliant delivery mechanism.