MAM supports playback for encrypted segmented assets. At present, we support encryption for HLS assets using an AES-128 encryption.
You must set up your account’s CDN resource, so that it uses an S3 bucket in Ooyala Flex Core:
Create a CDN Storage Resource.
Click the Configuration sub-tab
Configure the following fields for the resource’s read location:
Configure the following fields for the resource’s write location:
Click Save, to save the configuration.
Click Start, to start the resource.
Navigate to the Configuration section for your account, click the Metadata tab, and set the Publish CDN resource so that it uses the one you have just created.
Enable Flex NGINX Proxy for S3 assets in the MAM app, by setting the following consul key:
flex/flex-mam-app/proxyBaseUrlto the URL of your Flex NGINX Proxy instance(s). If you are already accessing the MAM app from the Flex NGINX Proxy, then the domain name should be the same.
Configure an instance profile with access to your S3 bucket on your Flex NGINX Proxy instance(s).
Enable segmented asset encryption in the Flex NGINX Proxy by setting the following consul key:
Images and assets can be now be served to MAM through the Flex NGINX Proxy and it can be configured to require authentication on each request.
To enable it set the
flex/flex-nginx-proxy/enableSecurityCheck consul key to “Yes”, after this all proxy request for images and assets require a valid JWT.