Content Encryption

The BrightSign Network Content Encryption feature allows you to distribute encrypted image, audio, and video files to your players. These files can be used by BrightSign players that are part of your network only; no other media device can open or play them.

A BSN network with Content Encryption can distribute encrypted media only. Once this service is enabled on your network, all current content files (and all content files added to the network in the future) will be encrypted.

Initial Steps

Before BrightSign enables Content Encryption for your network, you will need to ensure that all players on your network meet the criteria to process and play encrypted content.

Firmware

All players on your network must use firmware version 6.1.34 or newer. Follow these steps to update player firmware in the WebUI:

1. Navigate to the Groups tab.

2. Select the properties link for a group.

3. Use the Scheduled firmware updates dropdown lists to update the firmware for different player models in the group.

Autorun

All groups must use autorun version 7.5.13 or later. The autorun version of a group is determined by the version of BrightAuthor used to create presentations currently scheduled for that group. If presentations with different autorun versions are scheduled for a group, BSN selects the highest version number among the presentations and applies it to the group.

To see the current autorun version of a group, go to the Groups tab in the WebUI and select the properties for the group. The Autorun Version is listed below the firmware updates.

If you need to update the autorun version of a group, but wish to keep the same presentation(s) scheduled for that group, we recommend re-uploading the presentations using the current production version of BrightAuthor. Visit the BrightSign Downloads page to download the production version of BrightAuthor.

Encryption Process

When Content Encryption is first enabled for your network, BSN will encrypt all image, audio, and video files stored on your network. BSN functions will likely be inoperable during this process, and the process duration will depend on the size and number of image and video files on the network. 

You can view the progress of the encryption process in the Library tab of the WebUI. The number of Total files and Encrypted Files are listed at the top. Once these numbers are equal, the file encryption process is complete.

Open

The file encryption process will occur any time new content files are uploaded to your network (from either BrightAuthor or the WebUI). We recommend waiting until encryption completes after each upload to perform network actions related to scheduling, playlists, or content.

Using Encrypted Content

Encrypted content is supported in both BrightAuthor and the BSN WebUI. Note the restrictions and exceptions below:

BrightAuthor Presentations

• All image and video files used in presentation playlists are encrypted.

• Media files that are part of HTML5 or Live Text states, as well as files added in the Presentation Properties > Files window, are not encrypted.

• Media RSS Feed, Media List, and Play File states support Content Encryption; however, Media List and Play File states do not support the "Populate from data feed" option when Content Encryption is enabled.

• Encrypted content can be published using the BrightSign Network only; Content Encryption is not supported with the Standalone, Local File Network, and Simple File Network publishing methods.

WebUI Presentations

BSN WebUI presentations support content encryption for image and video files. Currently, there is no support for audio file encryption. 

Dynamic Playlists

All files used in Image/Video Dynamic Playlists and Audio-Only Dynamic Playlists are encrypted.

Live Media Feeds

Live Media Feeds support encryption when used with the Media RSS Feed state in BrightAuthor.

Disabling Encrypted Playback

In some cases, you may need to disable a player to prevent it from playing encrypted media. You can use either of these methods to disable a player:

• Move the player from its current group to the Disabled Players system group.

• (WebUI only) Select the properties link beneath a player name. Click the Disable button at the bottom of the window. 

When you move a player to the Disabled Players group, the default "Disabled Players" presentation will delete all encrypted media from the player storage. It will also display a message on screen stating that the player has been disabled. You can schedule any presentation you like for this group, but keep in mind that only the "Disabled Players" presentation can delete encrypted media from the player.

You may move a player from the Disabled Players group to another group at any time. This will re-enable Content Encryption on the player.