Widevine Quarterly Partner Update - Q1 2021

04/05/21

Welcome to another quarterly update from the Widevine team. Our aim is to improve transparency and facilitate discussions around improving ease of use, integration and deployment of Widevine.

Note: Access to Widevine documentation is now restricted to licensees. If you are unable to view the document links, please contact us.


Desktop Browser CDM

The latest Chrome CDM has been released with Chrome 89. This CDM will be updated for all compatible Chrome versions (starting from 68).

With the release of this latest client, Widevine will be removing support for older browser clients on May 31, 2021.


SDK Update

We have released 16.4.4 of the Proxy and License SDK. This is a recommended upgrade.

The next SDK release (16.5.0), in Q2 2021, will be a required upgrade.


DCSL Update

For our SDK users, Widevine has removed access to the legacy DCSL link. Please see the DCSL documentation for more information on using the new URL.

Contact us if you have not transitioned.


Widevine 3PL

The 3PL program has expanded to cover both Android and Linux platforms.


iOS Client

The current release of the iOS CDM is 15.2.4.

Upgrading to 14.4.0 or later (from any previous version) will invalidate existing offline licenses. A new device certificate is part of the release in the iOS repository. With the exception of serious security issues, there are no further releases planned for v14.

Available Date Removal Date iOS CDM Version
June 11, 2019 June 30, 2021 14.4.0 or later (and less than 15.0)
May 26, 2020 N/A 15.2.4


Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome releases to ensure that the latest updates are applied.

Available Date Removal Date Chrome Version Win Mac Linux ChromeOS
March 9, 2021

(Chrome 89 stable)

n/a 89

(requires Chromium M69 or later)

4.10.2209.0 or later 4.10.2198.0 or later 4.10.2209.0 or later 4.10.2252.0 or later

(Chrome 90 or later)

n/a May 31, 2021   Any version earlier than 4.10.2209.0 Any version earlier than 4.10.2198.0 Any version earlier than 4.10.2209.0 Any version earlier than 4.10.2252.0


Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD1, UHD2)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2


Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 6 weeks Every 6 weeks Per Android release End of Quarter End of Quarter End of Quarter
Current Version n/a See above n/a 16.4.0

License SDK
16.4.4 (doc)

Proxy SDK
16.4.4 (doc)

n/a


Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.
CAS UAT (Test) Test https://license.uat.widevine.com/cas/getlicense/<provider> https://license.uat.widevine.com/cas/getcontentkey/<provider> Testing environment for Device Integration and Service providers
CAS Staging (Test) Production https://license.staging.widevine.com/cas/getlicense/<provider> https://license.staging.widevine.com/cas/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
CAS Production Production https://license.widevine.com/cas/getlicense/<provider> https://license.widevine.com/cas/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.


Training Program Schedule

Due to the COVID-19 pandemic, all sessions have been cancelled. We will resume when Google offices are re-opened.

Widevine Quarterly Partner Update - Q4 2020

01/14/21

Welcome to another quarterly update from the Widevine team. Our aim is to improve transparency and facilitate discussions around improving ease of use, integration and deployment of Widevine.

Note: Access to Widevine documentation is now restricted to licensees. If you are unable to view the document links, please contact us.


Desktop Browser CDM

A schedule for the rollout of the next browser CDM update will be provided in a separate announcement.

Future releases of the browser CDM will require either:

  • License SDK version 16.4.3 or later
    • 16.4.3 is scheduled for release in February 2021.
  • Widevine Cloud License Service


DCSL Update

For SDK (Proxy or License) users, the Device Certificate Status List (DCSL) is migrating URL endpoints from v1 to v2. The v1 endpoint will be deprecated and cease to function by March 31, 2021. See the DCSL documentation for more information.

You can obtain the new DCSL tools (source, sample binary) from the respective SDK repository. Contact us to plan your transition.


Android 11

The release of Android 11 has introduced changes in license duration behavior. The primary difference is the use of playback duration parameter instead of the license duration parameter. The definition of never expire is now specified and returned as LLONG_MAX value.

Please review the Android Extensions document for clarification.


Device Revocation

Widevine devices may be revoked due to non-compliance with our device robustness rules and rendered inactive.

For device revocation, Widevine returns the following error codes:

Status Code Description
127 This device has been revoked.
An override is allowed to continue license issuance for these devices.
175 This device has been revoked permanently.

A new API has been added to allow license generation for a revoked device. This will allow you to deliver a license to the device, despite the revocation. Please refer to the latest documentation (Proxy Integration, License SDK) where specific use-cases are allowed to override revocation.


Device Status in License

Widevine recommends that our partners use the device metadata returned in a license response (or request query) to determine content distribution eligibility per respective distribution rights.

For example, it is not recommended to stream Level-1-quality content to a Level-3 platform.

There are constant updates to the device database to reflect the health of the ecosystem. It is important to note that the database information may not match from what is reported by the device. The server is always correct source of information.

Please ensure you have reviewed our Proxy Integration or License SDK documentation appropriately.


iOS Client

The current release of the iOS CDM is 15.2.4.

Upgrading to 14.4.0 or later (from any previous version) will invalidate existing offline licenses. A new device certificate is part of the release in the iOS repository. With the exception of serious security issues, there are no further releases planned for v14.

Available Date Removal Date iOS CDM Version
June 11, 2019 June 30, 2021 14.4.0 or later (and less than 15.0)
May 26, 2020 N/A 15.2.4


Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome releases to ensure that the latest updates are applied.

Available Date Removal Date Chrome Version Win Mac Linux ChromeOS
Jun 4, 2019

(Chrome M75 stable)

n/a 75

(requires Chromium M69 or later)

4.10.1440.18 or later 4.10.1440.18 or later 4.10.1440.18 or later 4.10.1440.18 or later


Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2


Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 6 weeks Every 6 weeks Per Android release End of Quarter End of Quarter End of Quarter
Current Version n/a 4.10.1679.x n/a 16.3.0

License SDK
16.4.1 (doc)

Proxy SDK
16.4.1 (doc)

n/a


Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.
CAS UAT (Test) Test https://license.uat.widevine.com/cas/getlicense/<provider> https://license.uat.widevine.com/cas/getcontentkey/<provider> Testing environment for Device Integration and Service providers
CAS Staging (Test) Production https://license.staging.widevine.com/cas/getlicense/<provider> https://license.staging.widevine.com/cas/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
CAS Production Production https://license.widevine.com/cas/getlicense/<provider> https://license.widevine.com/cas/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.


Training Program Schedule

Due to the COVID-19 pandemic, all sessions have been cancelled. We will resume when Google offices are re-opened.

Widevine Quarterly Partner Update - Q3 2020

10/02/20

Welcome to another quarterly update from the Widevine team. Our aim is to improve transparency and facilitate discussions around improving ease of use, integration and deployment of Widevine.

Note: Access to Widevine documentation is now restricted to licensees. If you are unable to view the document links, please contact us.

3PL Program

We have launched a Third Party Labs (3PL) initiative to help us scale device integrations. Authorized partners can be engaged to integrate Widevine into your device platforms - conducting independent testing and compliance on behalf of Widevine.

DCSL Update

For all SDK users, the Device Certificate Status List (DCSL) is migrating URL endpoints from v1 to v2.

All Widevine SDKs must upgrade to the latest SDK (available late July 2020). We will send out notification for each SDK release with updated documentation.


Device Revocation Override

A new API has been added to allow license generation for revoked devices (response status code = 127).

Widevine devices may be revoked due to non-compliance with our device robustness rules and rendered inactive. This feature is a prelude to the introduction of device security profiles, coming later in 2020.

This API is added to both the cloud license service and the license SDK, please refer to the latest documentation (v16.3.1) where specific use-cases are allowed to override revocation.


Device Status in License

Widevine recommends that our partners use the device metadata returned in a license response (or request query) to determine content distribution eligibility per respective distribution rights.

For example, it is not recommended to stream Level-1-quality content to a Level-3 platform.

There are constant updates to the device database to reflect the health of the ecosystem. It is important to note that the database information may not match from what is reported by the device. The server is always correct source of information.

Please ensure you have reviewed our Proxy Integration or License SDK documentation appropriately.


Proxy SDK

The Proxy SDK for DRM is now available (see Release table below). This SDK removes the complexity of managing service certificates, business logic application and JSON syntax generation.

The SDK is required to fully inspect the contents of a license request.

Key Feature of the SDK:

  • Improve license fetch latency by reducing round-trip calls to the license service.
  • Provides the ability to inspect a license request (without sending to the license service)
  • Generate a formatted payload for cloud license fulfilment.

This is the recommended option compared to preloading the Widevine License Service certificate for browser-based clients.


Widevine CAS

Widevine CAS is available for distribution and integration. See our server and device integration guides.

This product is exclusive to the Android TV platform. Please contact us for details and coordination with the Android TV team.


iOS Client

The current release of the iOS CDM is 15.2.3.

Upgrading to 14.4.0 or later (from any previous version) will invalidate existing offline licenses. A new device certificate is part of the release in the iOS repository. With the exception of serious security issues, there are no further releases planned for v14.

Available Date Removal Date iOS CDM Version
June 11, 2019 June 30, 2021 14.4.0 or later (and less than 15.0)
May 26, 2020 N/A 15.2.3


Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome releases to ensure that the latest updates are applied.

Available Date Removal Date Chrome Version Win Mac Linux ChromeOS
Jun 4, 2019

(Chrome M75 stable)

n/a 75

(requires Chromium M69 or later)

4.10.1440.18 or later 4.10.1440.18 or later 4.10.1440.18 or later 4.10.1440.18 or later


Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2


Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 6 weeks Every 6 weeks Per Android release End of Quarter End of Quarter End of Quarter
Current Version n/a 4.10.1679.x n/a 16.3.0

License SDK
16.4.1 (doc)

Proxy SDK
16.4.1 (doc)

n/a


Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.
CAS UAT (Test) Test https://license.uat.widevine.com/cas/getlicense/<provider> https://license.uat.widevine.com/cas/getcontentkey/<provider> Testing environment for Device Integration and Service providers
CAS Staging (Test) Production https://license.staging.widevine.com/cas/getlicense/<provider> https://license.staging.widevine.com/cas/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
CAS Production Production https://license.widevine.com/cas/getlicense/<provider> https://license.widevine.com/cas/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.


Training Program Schedule

Due to the COVID-19 pandemic, all sessions in 2020 have been cancelled. We will resume in 2021.

Widevine Quarterly Partner Update - Q2 2020

07/08/20

Welcome to another quarterly update from the Widevine team. Our aim is to improve transparency and facilitate discussions around improving ease of use, integration and deployment of Widevine.

Note: Access to Widevine documentation is now restricted to licensees. If you are unable to view the document links, please contact us.

DCSL Update

For all SDK users, the Device Certificate Status List (DCSL) is migrating URL endpoints from v1 to v2.

All Widevine SDKs must upgrade to the latest SDK (available late July 2020). We will send out notification for each SDK release with updated documentation.


Device Revocation Override

A new API has been added to allow license generation for revoked devices (response status code = 127).

Widevine devices may be revoked due to non-compliance with our device robustness rules and rendered inactive. This feature is a prelude to the introduction of device security profiles, coming later in 2020.

This API is added to both the cloud license service and the license SDK, please refer to the latest documentation (v16.3.1) where specific use-cases are allowed to override revocation.


Device Status in License

Widevine recommends that our partners use the device metadata returned in a license response (or request query) to determine content distribution eligibility per respective distribution rights.

For example, it is not recommended to stream Level-1-quality content to a Level-3 platform.

There are constant updates to the device database to reflect the health of the ecosystem. It is important to note that the database information may not match from what is reported by the device. The server is always correct source of information.

Please ensure you have reviewed our Proxy Integration or License SDK documentation appropriately.


Proxy SDK

The Proxy SDK for DRM is now available (see Release table below). This SDK removes the complexity of managing service certificates, business logic application and JSON syntax generation.

The SDK is required to fully inspect the contents of a license request.

Key Feature of the SDK:

  • Improve license fetch latency by reducing round-trip calls to the license service.
  • Provides the ability to inspect a license request (without sending to the license service)
  • Generate a formatted payload for cloud license fulfilment.

This is the recommended option compared to preloading the Widevine License Service certificate for browser-based clients.


Widevine CAS

Widevine CAS is available for distribution and integration. See our server and device integration guides.

This product is exclusive to the Android TV platform. Please contact us for details and coordination with the Android TV team.


Shaka Player Embedded

Shaka Embedded v1.0 is now available. This is an iOS native library that handles streaming media playback, similar to Shaka Player. It has the same supported features as Shaka Player, supporting both DASH and HLS content. Easily add Widevine support by following instructions provided with the Widevine CDM release.

We provide both API and ABI stability between major releases; you don’t need to update your code or even rebuild your app to update to newer versions. We will provide pre-built versions on GitHub, or you can build the library from source. (Widevine partners will need to build from source.)

Sources: https://github.com/google/shaka-player-embedded
Pre-built release: https://github.com/google/shaka-player-embedded/releases/tag/v1.0.0
Docs: https://google.github.io/shaka-player-embedded/


iOS Client

The current release of the iOS CDM is 15.2.3.

Upgrading to 14.4.0 or later (from any previous version) will invalidate existing offline licenses. A new device certificate is part of the release in the iOS repository. With the exception of serious security issues, there are no further releases planned for v14.

Available Date Removal Date iOS CDM Version
June 11, 2019 June 30, 2021 14.4.0 or later (and less than 15.0)
May 26, 2020 N/A 15.2.3


Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome releases to ensure that the latest updates are applied.

Available Date Removal Date Chrome Version Win Mac Linux ChromeOS
Jun 4, 2019

(Chrome M75 stable)

n/a 75

(requires Chromium M69 or later)

4.10.1440.18 or later 4.10.1440.18 or later 4.10.1440.18 or later 4.10.1440.18 or later


Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2


Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 6 weeks Every 6 weeks Per Android release End of Quarter End of Quarter End of Quarter
Current Version n/a 4.10.1679.x n/a 16.3.0

License SDK
16.2.1 (doc)

Proxy SDK
16.2.1 (doc)

n/a


Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.
CAS UAT (Test) Test https://license.uat.widevine.com/cas/getlicense/<provider> https://license.uat.widevine.com/cas/getcontentkey/<provider> Testing environment for Device Integration and Service providers
CAS Staging (Test) Production https://license.staging.widevine.com/cas/getlicense/<provider> https://license.staging.widevine.com/cas/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
CAS Production Production https://license.widevine.com/cas/getlicense/<provider> https://license.widevine.com/cas/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Service Performance

Please contact us to discuss the Queries Per Second (QPS) requirements for your service. Performance or load testing must be executed on our production systems only. We will need to know the expected traffic (QPS, duration) for any testing.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.


Training Program Schedule

Due to the COVID-19 pandemic, all sessions in 2020 have been cancelled. We will resume in 2021.

  • August 4 - 6 in Singapore - CANCELLED
  • October 6 - 8 in London - CANCELLED

Widevine Quarterly Partner Update - Q1 2020

04/01/20

Welcome to another quarterly update from the Widevine team. Our aim is to improve transparency and facilitate discussions around improving ease of use, integration and deployment of Widevine.

Note: Access to Widevine documentation is now restricted to licensees. If you are unable to view the document links, please contact us.

COVID-19

During these uncertain times, the Widevine team is working remotely (along with the rest of Google). Major product features are on track (CDM, OEMCrypto, Android, CAS, ATSC). Our cloud license services are scaled to fulfill higher demand due to work-from-home and quarantine requirements around the world.

For integrations, issues or questions, you can always reach us at contact us.

DCSL Update

The Device Certificate Status List (DCSL) is migrating URL endpoints from v1 to v2 by the end of March 2021.

All Widevine SDKs (License, Proxy) must upgrade to the latest SDK (available in June 2020) to use the new links. The v1 endpoint will not work after March 2021.

Proxy SDK

The Proxy SDK for DRM is now available (see Release table below). This SDK removes the complexity of managing service certificates, business logic application and JSON syntax generation.

The SDK is required to fully inspect the contents of a license request.

Key Feature of the SDK:

  • Improve license fetch latency by reducing round-trip calls to the license service.
  • Provides the ability to inspect a license request (without sending to the license service)
  • Generate a formatted payload for cloud license fulfilment.

This is the recommended option compared to preloading the Widevine License Service certificate for browser-based clients.

Device Status in License

Widevine recommends that our partners use the device metadata returned in a license response (or request query) to determine content distribution eligibility per respective distribution rights.

For example, it is not recommended to stream Level-1-quality content to a Level-3 platform.

There are constant updates to the device database to reflect the health of the ecosystem. It is important to note that the database information may not match from what is reported by the device. The server is always correct source of information.

Please ensure you have reviewed our Proxy Integration or License SDK documentation appropriately.

Widevine CAS

Widevine CAS is available for distribution and integration. See our server and device integration guides.

This product is exclusive to the Android TV platform. Please contact us for details and coordination with the Android TV team.

iOS Client

The current release of the iOS CDM is v14.4.1. With the exception of serious security issues, there are no further releases planned for v14.

Upgrading to 14.4.0 or later (from any previous version) will invalidate existing offline licenses. A new device certificate is part of the release in the iOS repository.

Available Date Removal Date iOS CDM Version
N/A August 13, 2019 Less than 14.4.0
June 11, 2019 June 30, 2021 14.4.0 or later

Browser CDM - Verified Media Path

The Widevine Desktop Browser CDM includes support for Verified Media Path (VMP). VMP provides a method to verify the authenticity of the browser framework. For browser deployments, this will provide an additional signal to determine if a browser-based implementation is sanctioned by Widevine.

All Widevine browser-based integrations (platforms and applications) must support VMP. VMP support is NOT available for Linux platforms.

The Widevine License Service API update (allow_unverified_platform) retains current default permissive behavior.

For content providers, the proxy integration guide has been updated with information about VMP and how to issue licenses. The Proxy SDK (see above) is a recommended alternative.

Current default behavior:
A license is issued if platform_verification_status is not tampered.

New default behavior:
A license is issued if platform_verification_status is verified.

There is an option to override the default behavior.

Windows and Mac OS X platforms support VMP by default.
Desktop Linux platform does not support VMP by default.
Note: The override must be enabled to issue a license to a Linux desktop.

Supported Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome stable releases to ensure that the latest updates are applied.

The CDM will only be supported with interface version 10 going forward.

Available Date Removal Date Chrome Version Win Mac Linux ChromeOS
n/a Jan 8, 2019 59 to 63 1.4.8.984 1.4.8.984 1.4.8.1000

1.4.8.1008

1.4.8.1000

1.4.8.1008

n/a August 13, 2019 64 to 68 1.4.9.1029 1.4.9.1029 1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

4.10.1158.0

1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

Jun 4, 2019

(Chrome M75 stable)

n/a 75

(requires Chromium M69 or later)

4.10.1440.18 4.10.1440.18 4.10.1440.18 4.10.1440.18

Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 6 weeks Every 6 weeks Per Android release End of Quarter End of Quarter End of Quarter
Current Version n/a 4.10.1610.0 n/a 15.3.0

License SDK
15.0.1 (doc)

Proxy SDK
3.7.0 (doc)

n/a

Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2

Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.
CAS UAT (Test) Test https://license.uat.widevine.com/cas/getlicense/<provider> https://license.uat.widevine.com/cas/getcontentkey/<provider> Testing environment for Device Integration and Service providers
CAS Staging (Test) Production https://license.staging.widevine.com/cas/getlicense/<provider> https://license.staging.widevine.com/cas/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
CAS Production Production https://license.widevine.com/cas/getlicense/<provider> https://license.widevine.com/cas/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Service Performance

Please contact us to discuss the Queries Per Second (QPS) requirements for your service. Performance or load testing must be executed on our production systems only. We will need to know the expected traffic (QPS, duration) for any testing.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.

Training Program (CWIP)

Available sessions in 2020:

  • May 19 - 21 in London - CANCELLED
  • August 4 - 6 in Singapore
  • October 6 - 8 in London

Widevine Quarterly Partner Update - Q4 2019

01/17/20

Welcome to another quarterly update from the Widevine team. Our aim is to improve transparency and facilitate discussions around improving ease of use, integration and deployment of Widevine.

Note: Access to Widevine documentation is now restricted to licensees. If you are unable to view the document links, please contact us.

VMP Status Clarification

The Widevine Cloud License Service returns the platform verification status (Verified Media Path) for supported platforms only (browsers).

For non-VMP platforms such as Android and living room devices, the status returned is PLATFORM_NO_VERIFICATION.

Please see the updated Proxy Integration document for further details.

Proxy SDK

The Proxy SDK for DRM is now available.

The purpose of this SDK is to improve license fetch latency by reducing round-trip calls to the license service. It provides the ability to inspect a license request (without sending to the license service) and generate a formatted payload for cloud license fulfilment.

Device Status in License

Widevine recommends that our partners use the device metadata returned in a license response (or request query) to determine content distribution eligibility per respective distribution rights.

For example, it is not recommended to stream Level-1-quality content to a Level-3 platform.

There are constant updates to the device database to reflect the health of the ecosystem. It is important to note that the database information may not match from what is reported by the device. The server is always correct source of information.

Please ensure you have reviewed our Proxy Integration or License SDK documentation appropriately.

Widevine CAS

Widevine CAS is available for distribution and integration. See our server and device integration guides.

This product is exclusive to the Android TV platform. Please contact us for details and coordination with the Android TV team.

iOS Client

The current release of the iOS CDM is v14.4.1. With the exception of serious security issues, there are no further releases planned for v14.

Upgrading to 14.4.0 or later (from any previous version) will invalidate existing offline licenses. A new device certificate is part of the release in the iOS repository.

Available Date Removal Date iOS CDM Version
N/A August 13, 2019 Less than 14.4.0
June 11, 2019 June 30, 2020 14.4.0 or later

Browser CDM - Verified Media Path

The Widevine Desktop Browser CDM includes support for Verified Media Path (VMP). VMP provides a method to verify the authenticity of the browser framework. For browser deployments, this will provide an additional signal to determine if a browser-based implementation is sanctioned by Widevine.

All Widevine browser-based integrations (platforms and applications) must support VMP.

The Widevine License Service API update (allow_unverified_platform) retains current default permissive behavior.

For content providers, the proxy integration guide has been updated with information about VMP and how to issue licenses.

Current default behavior:
A license is issued if platform_verification_status is not tampered.

New default behavior:
A license is issued if platform_verification_status is verified.

There is an option to override the default behavior.

Windows and Mac OS X platforms support VMP by default.
Desktop Linux platform does not support VMP by default.
Note: The override must be enabled to issue a license to a Linux desktop.

Supported Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome stable releases to ensure that the latest updates are applied.

The CDM will only be supported with interface version 10 going forward.

Available Date Removal Date Chrome Version Win Mac Linux ChromeOS
n/a Jan 8, 2019 59 to 63 1.4.8.984 1.4.8.984 1.4.8.1000

1.4.8.1008

1.4.8.1000

1.4.8.1008

n/a August 13, 2019 64 to 68 1.4.9.1029 1.4.9.1029 1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

4.10.1158.0

1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

Jun 4, 2019

(Chrome M75 stable)

n/a 75

(requires Chromium M69 or later)

4.10.1440.18 4.10.1440.18 4.10.1440.18 4.10.1440.18

Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 6 weeks Every 6 weeks Per Android release End of Quarter End of Quarter End of Quarter
Current Version n/a 4.10.1610.0 n/a 15.2.0

License SDK
15.0.1 (doc)

Proxy SDK
3.7.2 (doc)

n/a

Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2

Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Service Performance

Please contact us to discuss the Queries Per Second (QPS) requirements for your service. Performance or load testing must be executed on our production systems only. We will need to know the expected traffic (QPS, duration) for any testing.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.

Training Program (CWIP)

Available sessions in 2020:

  • March 10 - 12 in Tokyo.
  • May 19 - 21 in London.
  • August 4 - 6 in Singapore
  • October 6 - 8 in London

Widevine Quarterly Partner Update - Q3 2019

10/08/19

Welcome to another quarterly update from the Widevine team. Our aim is to improve transparency and facilitate discussions around improving ease of use, integration and deployment of Widevine.

Note: Access to Widevine documentation is now restricted to licensees. If you are unable to view the document links, please contact us.

Proxy SDK for DRM

The purpose of this SDK is to improve license fetch latency by reducing round-trip calls to the license service. It provides the ability to inspect a license request (without sending to the license service) and generate a formatted payload for cloud license fulfilment.

The Proxy SDK for DRM is now available.

Widevine CAS

Widevine CAS is available for distribution and integration. See our server and device integration guides.

This product is exclusive to the Android TV platform. Please contact us for details and coordination with the Android TV team.

Shaka Streamer

Shaka Streamer offers a simple config-file based approach to preparing streaming media. It greatly simplifies the process of using FFmpeg and Shaka Packager for both VOD and live content.

Just write a couple of YAML config files (or adapt one of our examples) and start streaming!

For more information, check out https://github.com/google/shaka-streamer/

Device Status in License

Widevine recommends that our partners use the device metadata returned in a license response (or request query) to determine content distribution eligibility per respective distribution rights.

For example, it is not recommended to stream Level-1-quality content to a Level-3 platform.

There are constant updates to the device database to reflect the health of the ecosystem. It is important to note that the database information may not match from what is reported by the device. The server is always correct source of information.

Please ensure you have reviewed our Proxy Integration or License SDK documentation appropriately.

iOS Client

The current release of the iOS CDM is v14.4.1. With the exception of serious security issues, there are no further releases planned for v14.

Upgrading to 14.4.0 or later (from any previous version) will invalidate existing offline licenses. A new device certificate is part of the release in the iOS repository.

Available Date Removal Date iOS CDM Version
N/A August 13, 2019 Less than 14.4.0
June 11, 2019 June 30, 2020 14.4.0 or later

Browser CDM - Verified Media Path

The Widevine Desktop Browser CDM includes support for Verified Media Path (VMP). VMP provides a method to verify the authenticity of the browser framework. For browser deployments, this will provide an additional signal to determine if a browser-based implementation is sanctioned by Widevine.

All Widevine browser-based integrations (platforms and applications) must support VMP.

The Widevine License Service API update (allow_unverified_platform) retains current default permissive behavior.

For content providers, the proxy integration guide has been updated with information about VMP and how to issue licenses.

Current default behavior:
A license is issued if platform_verification_status is not tampered.

New default behavior:
A license is issued if platform_verification_status is verified.

There is an option to override the default behavior.

Windows and Mac OS X platforms support VMP by default.
Desktop Linux platform does not support VMP by default.
Note: The override must be enabled to issue a license to a Linux desktop.

Supported Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome stable releases to ensure that the latest updates are applied.

The CDM will only be supported with interface version 10 going forward.

Available Date Removal Date Chrome Version Win Mac Linux ChromeOS
n/a Jan 8, 2019 59 to 63 1.4.8.984 1.4.8.984 1.4.8.1000

1.4.8.1008

1.4.8.1000

1.4.8.1008

n/a August 13, 2019 64 to 68 1.4.9.1029 1.4.9.1029 1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

4.10.1158.0

1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

Jun 4, 2019

(Chrome M75 stable)

n/a 75

(requires Chromium M69 or later)

4.10.1440.18 4.10.1440.18 4.10.1440.18 4.10.1440.18

Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 2 to 6 weeks Every 6 weeks Annual per Android release End of Quarter End of Quarter End of Quarter
Current Version n/a 4.10.1503.4 n/a 15.2.0

License SDK
4.6.1 (doc)

Proxy SDK
3.7.0 (doc)

n/a

Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2

Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Service Performance

Please contact us to discuss the Queries Per Second (QPS) requirements for your service. Performance or load testing must be executed on our production systems only. We will need to know the expected traffic (QPS, duration) for any testing.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.

Training Program (CWIP)

Available sessions in 2019:

  • March 10 - 12 in Tokyo.
  • May 19 - 21 in London.

Widevine Quarterly Partner Update - Q2 2019

07/02/19

Device Status in License

Widevine recommends that our partners use the device metadata returned in a license response (or request query) to determine content distribution eligibility per respective distribution rights.

For example, it is not recommended to stream Level-1-quality content to a Level-3 platform.

There are constant updates to the device database to reflect the health of the ecosystem and the database may differ from what is being reported by the device.

Please ensure you have reviewed our Proxy Integration or License SDK documentation appropriately.

iOS Client

The current release of the iOS CDM is v14.4.0. With the exception of serious security issues, there are no further releases planned for v14.

Upgrading to 14.4.0 (from any previous version) will invalidate existing offline licenses. A new device certificate is part of the release in the iOS repository.

Available Date Removal Date iOS CDM Version
N/A August 13, 2019 Less than 14.4.0
June 11, 2019 June 30, 2020 14.4.0 or later

Browser CDM - Verified Media Path

The Widevine Desktop Browser CDM includes support for Verified Media Path (VMP). VMP provides a method to verify the authenticity of the browser framework. For browser deployments, this will provide an additional signal to determine if a browser-based implementation is sanctioned by Widevine.

All Widevine browser-based integrations (platforms and applications) must support VMP.

For desktop browser platforms, the Widevine license service (including the License SDK) will be updated to strictly enforce VMP.

For content providers, the proxy integration guide has been updated with information about VMP and how to issue licenses.

Current default behavior:
A license is issued if platform_verification_status is not tampered.

New default behavior:
A license is issued if platform_verification_status is verified.

There is an option to override the default behavior.

Windows and Mac OS X platforms support VMP by default.
Desktop Linux platform does not support VMP by default.
Note: The override must be enabled to issue a license to a Linux desktop.

Widevine will publish updated license APIs by March 31 - with strict enforcement taking effect by May 30 (in line with the browser CDM deprecation schedule - see section below).

Supported Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome stable releases to ensure that the latest updates are applied.

The CDM will only be supported with interface version 10 going forward.

Available Date Removal Date Chrome Version Win Mac Linux ChromeOS
n/a July 31, 2018 59 or earlier 1.4.8.970 1.4.8.970 1.4.8.977 1.4.8.977
n/a Jan 8, 2019 59 to 63 1.4.8.984 1.4.8.984 1.4.8.1000

1.4.8.1008

1.4.8.1000

1.4.8.1008

n/a August 13, 2019 64 to 68 1.4.9.1029 1.4.9.1029 1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

4.10.1158.0

1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

Jun 4, 2019

(Chrome M75 stable)

n/a 75

(requires Chromium M69 or later)

4.10.1440.18 4.10.1440.18 4.10.1440.18 4.10.1440.18

Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 2 to 6 weeks Every 6 weeks Annual per Android release End of Quarter End of Quarter End of Quarter

Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2

Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Service Performance

Please contact us to discuss the Queries Per Second (QPS) requirements for your service. Performance or load testing must be executed on our production systems only. We will need to know the expected traffic (QPS, duration) for any testing.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.

Training Program (CWIP)

Available sessions in 2019:

  • July 15 - 17 in Singapore.
  • Oct 21 - 23 in Munich

Widevine Quarterly Partner Update - Q1 2019

03/15/19

NAB 2019

Widevine is part of the Google presence at NAB 2019 this year. Please reach out to meet-widevine@google.com to arrange a discussion.

Browser CDM - Verified Media Path

The Widevine Desktop Browser CDM includes support for Verified Media Path (VMP). VMP provides a method to verify the authenticity of the browser framework. For browser deployments, this will provide an additional signal to determine if a browser-based implementation is sanctioned by Widevine.

All Widevine browser-based integrations (platforms and applications) must support VMP.

For desktop browser platforms, the Widevine license service (including the License SDK) will be updated to strictly enforce VMP.

For content providers, the proxy integration guide has been updated with information about VMP and how to issue licenses.

Current default behavior:
A license is issued if platform_verification_status is not tampered.

Current default behavior:
A license is issued if platform_verification_status is not tampered.

New default behavior:
A license is issued if platform_verification_status is verified.

There is an option to override the default behavior.

Windows and Mac OS X platforms support VMP by default.
Desktop Linux platform does not support VMP by default.
Note: The override must be enabled to issue a license to a Linux desktop.

Widevine will publish updated license APIs by March 31 - with strict enforcement taking effect by May 30 (in line with the browser CDM deprecation schedule - see section below).

Supported Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome stable releases to ensure that the latest updates are applied.

Widevine CDM for Chrome 58 (or earlier) is no longer supported.

Available Date Removal Date Chrome Version Win Mac Linux ChromeOS
n/a July 31, 2018 59 or earlier 1.4.8.970 1.4.8.970 1.4.8.977 1.4.8.977
n/a Jan 8, 2019 59 to 63 1.4.8.984 1.4.8.984 1.4.8.1000

1.4.8.1008

1.4.8.1000

1.4.8.1008

n/a May 30, 2019 64 to 68 1.4.9.1029 1.4.9.1029 1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

4.10.1158.0

1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

Apr 23, 2019 n/a 69 or later 4.10.1185.0 4.10.1185.0 4.10.1185.0 4.10.1185.0
Apr 23, 2019 (Chrome M74) n/a 69 or later 4.10.1363.0 or later 4.10.1363.0 or later 4.10.1363.0 or later 4.10.1363.0 or later

Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 2 to 6 weeks Every 6 weeks Annual per Android release End of Quarter End of Quarter End of Quarter

Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2

Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Service Performance

Please contact us to discuss the Queries Per Second (QPS) requirements for your service. Performance or load testing must be executed on our production systems only. We will need to know the expected traffic (QPS, duration) for any testing.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.

Training Program (CWIP)

Available sessions in 2019:

  • May 21 - 23 in London, UK.
  • July 15 - 17 in Singapore.

Widevine Quarterly Partner Update - Q4 2018

12/10/18

Shaka Embedded for iOS

Shaka Player Embedded is a framework that runs Shaka Player in native (C++) apps. This gives a cross-platform interface to Shaka Player allowing native apps to use the player. Your native apps can now be built with the same features, behavior, and API as your Shaka-based web apps.

https://github.com/google/shaka-player-embedded

In addition to the C++ API, we provide a high-level wrapper for iOS called ShakaPlayerView which can be used from either Objective-C or Swift.

This is an open beta. We would love to have your feedback on what we've built, but we are not yet feature-complete for v1.0. Please file issues and questions on github.

Chrome Browser

Chrome 68 introduces support for CMAF. Please see Widevine’s CMAF specification for more information.

Chrome on Android is a Widevine L1 implementation as it leverages the built-in CDM on Android OS.

The Widevine Browser CDM includes support for Verified Media Path (VMP). VMP provides a method to verify the authenticity of the browser framework. For browser deployments, this will provide an additional signal to determine if a browser-based implementation is reliable and secure.

All Widevine browser-based integrations (vendors and browser-based applications) must support VMP.

For content providers, the proxy integration guide has been updated with information about VMP and how to issue licenses.

Supported Browser CDM Versions

The table below provides a list of valid browser CDMs. Widevine mandates all browser CDM implementations to stay current with Chrome stable releases to ensure that the latest updates are applied.

Widevine CDM for Chrome 58 (or earlier) is no longer supported.

Revocation Date Chrome Browser Version(s) CDM Version Windows CDM Version Mac OS X CDM Version Linux CDM Version ChromeOS
July 31, 2018 58 or earlier 1.4.8.970 1.4.8.970 1.4.8.977 1.4.8.977
Jan 8, 2019 59 to 61 1.4.8.984 1.4.8.984 1.4.8.1000

1.4.8.1008

1.4.8.1000

1.4.8.1008

Nov 1, 2019 62 to 68 1.4.9.1029 1.4.9.1029 1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

4.10.1158.0

1.4.9.1029

1.4.9.1070

1.4.9.1076

1.4.9.1088

4.10.1146.0

Current 69 or later 4.10.1185.0 or newer 4.10.1185.0 or newer 4.10.1185.0 or newer 4.10.1185.0 or newer

Release Schedule

Product Cloud

(License, Provisioning, Device UX)

Browser CDM Android CDM CDM Source Server SDKs (License, Proxy) CAS
Release Cadence Every 2 to 6 weeks Every 6 weeks Annual per Android release End of Quarter End of Quarter End of Quarter

Content Encryption

Widevine would like to reinforce our recommendation of using separate content keys to encrypt each video and audio track. In particular, the emphasis is on using separate content keys for each category of SD, HD, 4K (UHD1), 8K (UHD2) and AUDIO streams.

Content Type Minimum Recommended Best Store License? Output Protection
AUDIO No encryption Separate content key for audio tracks Separate content key for audio tracks Yes N/A
SD Single content key for all tracks Separate content key for each video group

(SD, HD, UHD)

Separate content key for each video track Yes N/A
HD (720p or higher) Yes HDCP 1.4
UHD1 (4K)

UHD2 (8K)

Separate content key No HDCP 2.2

Widevine Cloud License Service

Cloud Environments

Widevine has three different cloud services - UAT, Staging and Production. Moving forward, we recommend that partners use the appropriate environment to validate any new changes coming to the production environment.

The Widevine release process will update Staging first. Approximately 1-2 weeks later, Production and UAT are updated simultaneously if Staging is successfully verified.

This table represents the available Widevine Cloud License Service endpoints:

Environment Data Store GetLicense GetContentKey Purpose
UAT (Test) Test https://license.uat.widevine.com/cenc/getlicense/<provider> https://license.uat.widevine.com/cenc/getcontentkey/<provider> Testing environment for Device Integration and Service providers
Staging (Test) Production https://license.staging.widevine.com/cenc/getlicense/<provider> https://license.staging.widevine.com/cenc/getcontentkey/<provider> Testing environment for bug fixes, and new changes.
Production Production https://license.widevine.com/cenc/getlicense/<provider> https://license.widevine.com/cenc/getcontentkey/<provider> Standard production environment.

The Production and Staging environment is accessed using the same set of service credentials (IV/Key pair), separate from UAT.

  • Staging is a pre-release environment for Production releases. It is recommended that a service provider use staging to validate after launch.
  • Data (content keys, provider credentials)

The UAT (Test) environment is accessed using a unique set of service credentials (IV/Key pair). The purpose of UAT is to enable:

  • Testing and integration of devices in development.
  • Testing and integration of service providers.

Cloud Service Performance

Please contact us to discuss the Queries Per Second (QPS) requirements for your service. Performance or load testing must be executed on our production systems only. We will need to know the expected traffic (QPS, duration) for any testing.

Cloud Signing Key Rotation

Signing key credentials for access to the Widevine Cloud License Service can now be enabled to expire and new signing keys will be auto-generated. Please contact us if you are interested in enabling this function.

Training Program (CWIP)

Available sessions in 2019:

  • March 18 - 20 in Bangalore, India.
  • May 21 - 23 in London, UK.
  • July 15 - 17 in Singapore.