KDM Generation and Encryption Service — Secure Access for Your Encrypted DCP
Protect your film and control where it can be screened.
At DCPReady, we create and manage KDMs (Key Delivery Messages) — the digital keys that allow encrypted DCPs to play on authorized cinema servers only.
Whether you’re delivering to a festival, distributor, or private screening, we make sure your encrypted DCP is secure, compliant, and projection-ready.
Why Encryption and KDMs Matter
An encrypted Digital Cinema Package protects your film from unauthorized copying or playback.
A KDM (Key Delivery Message) works like a secure digital ticket — granting access to your DCP only for a specific server, during specific dates.
It’s how professional film distribution ensures both security and smooth playback worldwide.
With DCPReady, your encryption process is simple, fast, and handled by experts who understand the reality of festivals, deadlines, and cinema compatibility.
How Our KDM Generation Works
We handle the entire process for you — from encryption to secure key delivery.
- Encrypt your DCP according to DCI standards (AES-128)
- Generate unique KDMs for each cinema server (using server certificates)
- Set custom validity windows (start and end dates for each projection)
- Deliver KDMs securely to cinemas or festivals
- Track and manage all active and expired keys upon request
You’ll receive your KDMs ready to send or deliver directly to the projection team — no software, no confusion, no playback errors.
When to Use KDM Encryption
- When your film will screen at festivals or public events and you want content protection
- For limited theatrical runs or advance press screenings
- When sending your film to distributors or sales agents
- If your Digital Cinema Package includes sensitive or unreleased material
- When a festival or venue requires encryption for ingestion
Why Filmmakers Trust DCPReady
We’ve worked on both sides of the projection booth — as cinema operators and festival organizers — so we understand what technicians expect.
Our KDMs are:
- DCI-compliant (AES-128 encryption, trusted chain certificates)
- Verified on real cinema servers before delivery
- Compatible worldwide with all major systems (Dolby, Doremi, Christie, Barco, Qube)
- Delivered fast, with options for rush turnaround
- Backed by personalized support, not automated scripts
Olga M.
"I find DCP creation the most stressful part of the whole filmmaking process and always just prefer a post house to do it."
Kyle G.
I just got accepted to my first film festival and had to teach myself what a DCP is. DCPReady made the full process easy
Gus R.
Creating a DCP with DCPReady gave my film access to festivals that would have been out of reach otherwise
David D.
This is so awesome and can't wait to dive in. We saw the cinema recording DCPReady provide us as real theatre QC and looks amazing
Frank H.
I'm really very grateful for the work you've done and I can't thank you enough, as I've stretched the limits of my efforts on the film and its small budget
Cristina L
It was my first time creating a DCP, and seeing my film on the big screen looked incredible.
Pricing
- KDM Generation for DCPReady clients: Reduced prices
- External DCP KDM generation: quoted based on encryption setup and DKDM access
- DKDM management available for distributors and labs
Need multiple keys? We offer bundled KDM packages for festivals, multi-venue tours, or distributors
FAQs — KDMs and DCP Encryption Explained
What exactly is a KDM?
A KDM (Key Delivery Message) is an encrypted file that contains the decryption key for your DCP. It authorizes playback only on a specific cinema server and within a defined date window.
How does KDM encryption protect my film?
Your DCP is encrypted using AES-128 bit encryption. Only servers that receive a valid KDM (matching their certificate) can decrypt and play it — ensuring your film cannot be copied or accessed elsewhere.
Can I get multiple KDMs for different cinemas?
Yes. We can generate as many KDMs as you need, each one unique to the cinema’s server certificate and your desired screening dates.
What if I didn’t make my DCP with DCPReady?
We can still generate KDMs for external DCPs, as long as you provide the necessary DKDM (a lab key that allows us to issue new KDMs securely).
What is a DKDM?
A DKDM (Distributor KDM) is like a “master key” that allows authorized partners — like DCPReady — to create new KDMs for encrypted content without re-encrypting the DCP.
How long does KDM generation take?
Usually within 24 hours, or even faster with our rush option.
What information do you need to generate a KDM?
- Your DCP encryption certificate (CPL)
- The server certificates from each cinema
- The screening dates and times
We’ll handle the rest
Is my data secure?
Absolutely. We follow DCI-compliant encryption protocols, handle all certificates securely, and transmit KDMs via encrypted delivery channels.