14 minute guide · 8 illustrated steps

Generate KDMs and manage cinema bookings

Choose a one-off request or a managed cinema booking. Both start with registered CPLs and a validity period; managed bookings also keep the OpenTDL auditorium relationship so they can respond to changed devices.

Open Generate KDM

Before you begin

  • Sign in with KdmGen access and register the encrypted CPLs and matching DKDMs first.
  • Have the exact authorised start and end times. Every selected CPL needs DKDM coverage for the full period.
  • Identify the recipient player certificates, or the correct facilities and auditoriums in OpenTDL. For automatic email delivery, check the facility's KDM delivery addresses.

Recognise the screen

These screenshots show the actual tool. The numbered steps below use labelled examples to explain the selections and results.

Target CPLs panel with My CPLs visibility, Add CPL and Add via DCP controls.
Actual screen: Target CPLs starts with an empty selection. Full size
Review and Create panel with Validate Setup and Create Quick KDM buttons.
Actual screen: validation and creation are separate actions. Full size
Booking Automation controls for regenerating KDMs after OpenTDL device changes and delivering them to facility KDM addresses.
Actual screen: managed bookings offer regeneration and email delivery options. Full size

Choose Quick KDM or Create Booking

The opening instructions describe each workflow. Quick KDM creates an ad hoc request using direct device certificates, OpenTDL auditoriums, or both. Recent Quick KDMs can be loaded as the basis of another request.

Create Booking uses OpenTDL auditorium targets and offers automation for changed device certificates and email delivery. Extend Booking starts from an existing managed booking. KDM Email Queue shows delivery status and attempts.

Generate KDM. KDM Email Queue tracks outgoing delivery separately from generation. Quick KDM is appropriate for an ad hoc issue. Managed bookings preserve the auditorium relationship.
Step 1: Generate KDM. Illustrated example using sample data. Full size

Expected result: The workflow matches whether you need a one-off issue or an ongoing facility booking.

Populate Target CPLs

Target CPLs starts empty. Select My CPLs or Distributor CPLs, then press Add CPL to find registered compositions. Add via DCP lets you select registered compositions by package. Filter by composition, package or distributor as appropriate.

Check the resulting Target CPLs table and remove versions you do not intend to issue. Multi-CPL requests apply the chosen target set and validity period to the selected compositions, so check every version's DKDM coverage.

Target CPLs. Only the compositions added to Target CPLs are included. Change visibility scope if a distributor-assigned CPL is missing. Remove an unwanted version before creating the request.
Step 2: Target CPLs. Illustrated example using sample data. Full size

Expected result: Target CPLs explicitly lists the compositions this request will include.

Set the authorised validity period

Enter Valid From and Valid To in the workflow's validity section. Include the time as well as the date, and add a useful Comment. Confirm the intended cinema time zone when arranging cross-region screenings; do not assume that a date-only agreement defines the exact playback window.

The end must be later than the start, and the full interval must be covered by a usable DKDM for each CPL. Run Validate Setup after choosing all targets so the backend can check dates and certificates together.

Quick KDM Validity. Illustrative period only. Enter the dates and time zone agreed for the screening. A midnight end is the start of that date, not its last screening. Validate the complete interval, including all selected CPL versions.
Step 3: Quick KDM Validity. Illustrated example using sample data. Full size

Expected result: The request has an explicit start and end for authorised playback.

Add player certificates or OpenTDL auditoriums

In Quick KDM, use Add in Target Devices to search the device database, or Add in Target OpenTDL to select a facility. The target tables are intentionally empty until you add recipients. Managed bookings use Target OpenTDL only.

In the OpenTDL dialog, use the Facility, Address and Country filters. Address and country searches are remembered for subsequent selections. Select the correct facility, review the selected auditoriums, and apply the required screens; all screens are initially selected for convenience.

Verify the auditorium and player serial numbers in the target table. A cinema with several screens is not a single recipient certificate. Remove any screen or direct device that should not receive keys.

Target OpenTDL. Check the address and screen list before applying the selection. A managed booking follows the auditorium, even if its player changes. Remove any screens outside the agreed engagement.
Step 4: Target OpenTDL. Illustrated example using sample data. Full size

Expected result: The target tables contain the exact devices or auditoriums authorised for this request.

Validate, then create and download

Press Validate Setup in Review and Create. This checks the CPLs, DKDMs, dates and target certificates without creating or queueing KDMs. Read the returned reasons if validation fails, correct the setup and validate again.

Press Create Quick KDM or Create Booking to submit the request. Generation is a backend process: submitting successfully is not the same as having finished KDM files. Review the resulting status and use Download when output is available.

If a run is partial or failed, inspect the reported error and target counts. Retry after correcting the cause. Keep a downloaded copy of the issued KDMs with the booking record used for the screening.

Review and Create. A validation error should include the reason to correct. Validate again after changing dates, CPLs or targets. Check the completed/expected output counts, not just the submit confirmation.
Step 5: Review and Create. Illustrated example using sample data. Full size

Expected result: The backend generates the authorised KDMs and makes completed output available.

Configure managed booking automation

In Create Booking, review Booking Automation. Enable regeneration for new OpenTDL device certificates when replacement players should receive updated keys during the active booking. Enable delivery when generated keys should be sent to the facility's KDM capability email addresses.

Review the email template and any additional recipients. The facility's general contact email and its KDM delivery capability address are different fields; use Facilities/OpenTDL to check the latter.

Automation depends on current, resolvable OpenTDL device information and usable DKDM coverage. Check generation and delivery outcomes when a player changes, especially close to a screening.

Booking Automation. These options apply while the managed booking is active. Regeneration and delivery are separate settings. Check the email queue to confirm the delivery outcome.
Step 6: Booking Automation. Illustrated example using sample data. Full size

Expected result: The booking records the auditoriums, the authorised period and the chosen automation settings.

Extend a managed booking or reuse a Quick KDM

For a Quick KDM, find the entry in Recent Quick KDMs and press Load. Review the reloaded compositions and targets, change the dates, then validate and create a new request.

For a managed booking, open Extend Booking and select the previous booking. Use a 7 or 14-day Thursday-to-Wednesday holdover preset, or enter a custom Extension Period. Review the exact timestamps and target list before pressing Create Extension.

A holdover does not extend the authority in the source DKDM. If the new period exceeds its coverage, register renewed DKDMs before issuing the extension.

Extend Booking. Review preset dates before applying them. Quick KDM history uses Load to prepare another ad hoc request. Managed extensions must still fit within usable DKDM coverage.
Step 7: Extend Booking. Illustrated example using sample data. Full size

Expected result: A new request or booking extension covers the reviewed future engagement period.

Follow email delivery to completion

Open KDM Email Queue to inspect queued and sent emails. Select an entry to inspect the recipients, attachment manifest, attempts and any recorded error. Use the available retry or resend action when appropriate after checking the failure.

For a completed Quick KDM, the Recent Quick KDMs row offers Email as well as Download. Review the recipients and message before sending.

A generated KDM, a queued email and a sent email are different outcomes. Sent confirms the recorded sending result; it does not prove the cinema imported the KDM or successfully played the DCP. Confirm receipt and playback readiness with the site.

KDM Email Queue. Select a delivery to inspect recipients, attachments and any error. Generation status and email status are tracked separately. Confirm with the cinema that the correct KDM was imported.
Step 8: KDM Email Queue. Illustrated example using sample data. Full size

Expected result: You can account for generated files and the delivery status of each email.

Troubleshooting

Why is Target CPLs empty?

It is a selection table. Use Add CPL or Add via DCP, and check My CPLs versus Distributor CPLs. If the required composition is missing from the selector, check its registration, your access and DKDM validity.

What does Validate Setup actually do?

It asks the backend to check the current compositions, DKDM coverage, dates and recipient certificates. It does not queue a generation job or send an email. The create action is the next step.

Why did only some KDMs generate?

Review the failed targets and reported errors. A target may lack a usable certificate or a selected CPL may have unsuitable DKDM coverage. Correct the underlying data before retrying, and check the output counts again.

Will a Quick KDM automatically follow a replaced player?

Use Create Booking with OpenTDL auditoriums and regeneration enabled for that workflow. A Quick KDM can be loaded and issued again manually, but it is not a managed auditorium booking.

Why has the cinema not received the email?

Check whether the delivery is still queued, failed or marked sent. Inspect its recipients and error details, and verify the facility's KDM capability email address. A sent result also warrants checking the recipient's spam or mail-filtering system.

2026 © D-Cine.net.
Developed by James Gardiner