irdeto-armor-keys-and-credentials-for-video

Video entertainment / Irdeto Armor

Keys & Credentials for video

A vendor-neutral managed security solution that enables pay-TV operators to control cryptographic keys, DRM certificates, hardware roots of trust and other security assets across the full STB lifecycle.

As broadband access expands and OTT competition grows, pay-TV operators are modernizing video platforms with hybrid STBs, Android TV and RDK deployments, super-aggregation and premium app integrations. Irdeto Keys & Credentials for video gives operators control of cryptographic assets, helping extend STB lifecycles, reduce vendor lock-in and meet content owner security requirements.

Benefits

Maximize return on investment

Extend STB lifecycles and defer costly hardware replacement

Reduce churn

Bring new services and premium apps to deployed STBs

Reduce vendor lock-in

Retain control across SoC, OEM and security suppliers

Optimize operations

Simplify manufacturing and deploy market-specific credentials

Strengthen security

Protect STBs with trusted identities and cryptographic assets

Support compliance

Meet content owner security requirements for premium services

Proven results

1B+

certificates and security assets

80M+

managed hardware root-of-trust devices

99.95%

service availability

24/7

global support

Key features

Trusted authority

Dedicated air-gapped Secure Keying Center with ISO 27001:2022 certification

Secure provisioning

Provision keys and credentials throughout the STB lifecycle

Managed code signing

Authorize firmware and software releases through secure signing workflows

Security by design

Validate SoC security before manufacturing and deployment

Silicon ecosystem support

Integrate leading SoC vendors and ecosystems

Lifecycle management

Rotate, revoke and renew security assets throughout the device lifecycle

How it works

Irdeto supports the STB lifecycle from security by design through secure manufacturing and ongoing lifecycle management. During manufacturing, trusted identities, DRM credentials and cryptographic assets are securely provisioned into each device. Once deployed, operators retain full control over rotating, revoking and introducing new security assets throughout the STB lifecycle.

Specifications

  • Scope: Hybrid and IP-only STBs for greenfield and brownfield deployments.
  • Cryptographic assets: DRM credentials, X.509 PKIs, code-signing keys, OTP keys, JTAG credentials, RSA and ECC keys.
  • Premium app support: Google Widevine DRM, Microsoft PlayReady DRM, Netflix and YouTube.
  • Provisioning: Factory provisioning, manufacturing reporting and field provisioning.
  • Code signing: Boot loaders, TEEs, STB images and applications.
  • Automation: APIs, self-service portal and automated workflows.
  • Capacity: Up to 125,000 keys processed per hour.
  • Integration: Android, RDK and major SoC vendors.
  • Enterprise support: Up to 99.95% availability with 24/7 support, business continuity and disaster recovery.
  • Deployment: Greenfield and brownfield migrations.
Frequently Asked Questions
What is Irdeto Keys & Credentials?

Irdeto Keys & Credentials for Video is a managed service for STBs that enables pay-TV operators to control the lifecycle of cryptographic keys, DRM certificates, hardware roots of trust and other security assets while retaining legal ownership of those assets.

Who is the solution designed for?

It is designed for pay-TV operators deploying managed STBs, including hybrid devices built on Android TV or RDK.

What credentials can be managed?

The service manages DRM certificates, premium app credentials, unique chipset keys, certificates, passwords, X.509 PKIs, code-signing keys, OTP keys and JTAG credentials.

Does it support deployed STBs?

Yes. Irdeto K&C can migrate existing keys and certificates from legacy providers, and it supports both greenfield and brownfield deployments.

How does field provisioning work?

During manufacturing, Irdeto's keying centers and cloud platform generate and provision trusted identities and security assets directly into devices. Once deployed, operators can rotate, revoke or introduce new credentials and other security assets as needed.

Can it support premium OTT services?

Yes. The service supports DRM and premium app credentials, including Google Widevine DRM, Microsoft PlayReady DRM, Netflix and YouTube.

How does it reduce vendor lock-in?

It gives operators control of the security foundation in each STB across SoC vendors, OEMs, DRM technology suppliers and middleware providers, helping them enter supplier negotiations with viable alternatives.

Does it support Android TV and RDK?

Yes. Irdeto K&C fully supports both Android TV and RDK platforms.