CONFIGURATION GUIDE

27-May-11 1(12)

Luminato Conditional Access Configuration Guide

Luminato SW release 3.8.x

CONFIGURATION GUIDE

27-May-11 2(12)

Table of contents

1. Luminato DVB simulcrypt content protection .................................................................. 3

1.1. Introduction ............................................................................................................................... 3 1.2. Scope of Guide ......................................................................................................................... 4 1.3. Luminato CAS interoperability .................................................................................................. 4

2. Preparations ........................................................................................................................ 5

3. Scrambling Licenses .......................................................................................................... 6

3.1. Chassis Scrambling License ..................................................................................................... 6 3.2. Sub Module Scrambling Licenses ............................................................................................. 6 3.3. Licenses Upgrade ..................................................................................................................... 6

4. Configuring ECM ................................................................................................................. 7

4.1. Add package (access criteria container) ................................................................................... 7 4.2. Add ECM-generator .................................................................................................................. 8 4.3. Add new ECM stream ............................................................................................................... 9

5. Configuring EMM ............................................................................................................... 10

6. Configuring services ......................................................................................................... 11

7. Configuring modules ........................................................................................................ 12

CONFIGURATION GUIDE

27-May-11 3(12)

1. LUMINATO DVB SIMULCRYPT CONTENT PROTECTION

1.1. Introduction

Luminato is designed to process live TV signals from various sources (DVB-S/S2, DVB-T, DVB-ASI) and make transport stream processing for cable or IPTV opera-tors network. Luminato can also do DVB Simulcrypt compliant content protection. Operator can control service conditional access to manage service offering to sub-scribers.

The DVB Simulcrypt Scrambling solution is embedded. It doesn’t require any addi-tional hardware. Luminato chassis has Simuclrypt synchronizer to create intercon-nection to Conditional Access Servers (CAS) and to DVB Common Scrambling Al-gorithm scramblers. The sub modules have embedded scrambler for service encryp-tion.

Figure 1 Luminato DVB simulcrypt content protection

Luminato chassis creates connection to Conditional Access Server to exchange Co-dewords and Entitlement Control Messages (ECM) with ECM generator and rece-ives Entitlement Management Messages (EMM) from EMM generator.

Luminato chassis delivers ECMs and Codewords to DVB CSA scramblers in sub modules. EMM are also injected to streams together with CAT table.

CONFIGURATION GUIDE

27-May-11 4(12)

1.2. Scope of Guide

This guide gives instructions to make proper Luminato configuration for content pro-tection based on DVB simulcrypt standard.

This guide is done based on release 3.3.33 and updated for release 3.8.1. The scrambling can be done in following modules:

LRS-A dual satellite receiver module with two descrambling slots

LRS-B quad satellite receiver module

LRT-A dual terrestrial receiver module with two descrambling slots

LAS-A quad ASI input module

LQM-A quad QAM modulator (SW >3.2.16)

1.3. Luminato CAS interoperability

Luminato DVB Simulcrypt content protection solution is designed according to DVB standard. Therefore all CAS system that is designed strictly according to standard should work.

Contact Teleste support for latest list of tested CAS systems.

NOTE: Both EMM TS packet and section formats are supported from release 3.1.23 onwards.

CONFIGURATION GUIDE

27-May-11 5(12)

2. PREPARATIONS

To be able to configure Luminato Conditional Access as described in this document, you need to:

Have Luminato with software version 3.1.23 (or later) installed.

Have licenses for Simulcrypt synchronizer (SCS) in Luminato chassis and scram-bling channels licenses supported in modules. User can check licenses from Administration->Licenses –page.

Ensure that your Luminato and CA-system ECM-Generator/EMM injector IP-network settings are properly configured (Administration -> Network)

Have the following CA system related information available (consult CA vendor): o Super CAS ID o Access criteria's o Simulcrypt protocol version o ECMG IP-address and port o EMM client ID, data ID, port number and required EMM bandwidth.

Recommended browsers are: Internet Explorer 7 or 8 and Mozilla Firefox 3 or later.

CONFIGURATION GUIDE

27-May-11 6(12)

3. SCRAMBLING LICENSES

Scrambling can be enabled with licensing.

3.1. Chassis Scrambling License

Luminato chassis has Simulcrypt Synchronizer (SCS) license, which must be enabled to create communication work between Luminato chassis and CAS system.

3.2. Sub Module Scrambling Licenses

Each sub module has license for scrambler. Scrambler license must be enabled for service encryption in sub module.

Sub modules have scalable licenses to adapt operator need for service encryption. There are three steps for amount of service encryption in module.

3.3. Licenses Upgrade

Licenses can be ordered separately. Serial number of target module or chassis is needed for license-key generation.

New license-code is entered on Administration-Licenses –pages. The page is orga-nized to tabs for chassis and slots.

Select target module or chassis and copy/paste license string to entry field and press Apply.

Check that green mark is enabled for scrambling license.

Figure 2 Luminato Chassis licenses - Simulcrypt syncronizer enabled!

Figure 3 Dual Satellite Receiver Licenses - unlimited scrambling channels enabled.

CONFIGURATION GUIDE

27-May-11 7(12)

4. CONFIGURING ECM

4.1. Add package (access criteria container)

This step creates Service Packages, which can be used to group service together to authorize with same access criteria. Typical packages could Sport package, Film package etc. Configuration -> CAS -> Packages -> Edit packages

Figure 4 Package (Access Criteria) Configuration

Give a descriptive name and valid access criteria for the package and hit “Add”. Package names must be unique and thus a prefix or a suffix defining the CA system may be needed for the SimulCrypt systems. New, not yet saved package configurations are shown in green. When you have configured the needed packages hit “Save”.

CONFIGURATION GUIDE

27-May-11 8(12)

4.2. Add ECM-generator

This procedure creates connection between Luminato and CAS system ECM generator.

Configuration->CAS->ECMG->Edit ECM Generators

Figure 5 ECM generator connection configuration

Give a descriptive alias name for the ECM generator and fill in following parameters as informed by the CA system vendor:

Super CAS ID of the CA-System

IP address and port of the ECMG

SimulCrypt protocol version

Spare IP address/port if there is a spare ECMg configured in the system For Channel ID choose some unique ID or leave empty for Luminato to allocate it. For Default CP fill in the requested cryptoperiod in seconds. When done, hit “Add” and repeat for all ECM generators in the system. New, not yet saved ECM generator configurations are shown in green. When you have configured the needed generators hit “Save”.

CONFIGURATION GUIDE

27-May-11 9(12)

4.3. Add new ECM stream

This step maps defined Package to ECM streams, which can be connected to service in later phase.

Configuration->CAS->ECM streams->Edit ECM Streams

Figure 6 ECM stream configuration

Choose ECMG from the pull down list. List contains all the ECM generators that were defined in the pre-vious step. Give descriptive name for “Stream alias” and assign a previously created package to it. There is no need to include CA system identifier into stream alias name but rather choose a name that describes the ser-vice that will be delivered using this scrambling. ECM ID is not defined when configuring a stream but it can be changed for already added streams. Control Word group may be left empty, in which case all stream will be assigned to same CW group.

CONFIGURATION GUIDE

27-May-11 10(12)

5. CONFIGURING EMM

This step gives instructions to create connection from CAS system to Luminato chassis. Configuration->CAS->EMM->Edit EMM Streams

Figure 7 EMM connection

Give alias-name for this EMM, fill in clientid, port, data id, data type and maximum EMM bandwidth and hit “Add”. Repeat for all EMM generators and save the configuration. Wait for the EMM-injector to connect to Luminato and when everything is OK you’ll see green Status OK on EMM-page.

CONFIGURATION GUIDE

27-May-11 11(12)

6. CONFIGURING SERVICES

This step gives instruction for service scrambling using predefined packages and ecm.

Configuration->Outputs->Processing (for the right service output) As an example of scrambling configuration on service level:

Figure 8 Service scrambling configuration

Enable scrambling by ticking the box “Scrambling enabled” => Conditional access-bar becomes visible. Select the package to be used for scrambling from below of the list of Conditional Access. NOTE: In output advanced settings PID allocation mode should be “SID mode”, not “Input follow mode”.

CONFIGURATION GUIDE

27-May-11 12(12)

7. CONFIGURING MODULES

At module configuration page, select “Edit DVB Settings”. Following page opens:

CA descriptor PMT mode defines the CA descriptor position in PMT tables. Possible settings are:

Default CA descriptor will be in program level if ALL service compo-nents are scrambled, otherwise CA descriptor will be in component level and exists only for components which are scrambled.

Program level CA descriptor is always in program level

ES level CA descriptor is always in component level and each com-ponent has its own CA descriptor

Program & ES level CA descriptor is always in both program and component level

NOTE: In Configuration – Modules page SID step size should be left as default 20.