All Products
Search
Document Center

ApsaraVideo VOD:DRM encryption

Last Updated:Jul 10, 2026

ApsaraVideo VOD provides Widevine and FairPlay digital rights management (DRM) encryption to protect video content from unauthorized access and distribution. A single transcoding task produces one output file that supports both DRM solutions, reducing transcoding and storage costs.

Supported platforms

DRM solution Mobile devices Browsers
Widevine Android Chrome, Firefox 47 and later, Microsoft Edge, and Opera
FairPlay iOS Safari
Note

Before you use DRM encryption, review the rules and limits of Widevine and FairPlay.

How DRM encryption works

ApsaraVideo VOD provides an end-to-end DRM solution that covers encryption, certificate management, license issuance, and playback.

DRM encryption architecture

Encryption phase

  1. Upload a video file to ApsaraVideo VOD. The file is stored in OSS.

  2. ApsaraVideo for Media Processing transcodes and encrypts the video with DRM. One transcoding task produces a single output file that supports both Widevine and FairPlay.

Playback phase

  1. The APP Server sends a playback request to ApsaraVideo Player with the video ID, STS token, and certificate ID.

  2. ApsaraVideo Player negotiates with the Playback service to obtain the decryption key.

  3. ApsaraVideo Player obtains the encrypted video streams through CDN.

  4. ApsaraVideo Player decrypts and plays the video.

Capabilities

Capability Description
DRM encryption Encrypt videos with Widevine and FairPlay DRM during transcoding.
Certificate management Add and manage FairPlay certificates in the ApsaraVideo VOD console.
DRM playback Decrypt and play DRM-encrypted videos with ApsaraVideo Player.

Cost efficiency

Each transcoding task generates a single output file that supports both Widevine and FairPlay, eliminating the need for separate files and reducing transcoding and storage costs.

Security and stability

ApsaraVideo VOD safeguards copyrighted video content with fine-grained permission management and robust security controls. The distributed service architecture handles high-concurrency workloads for your business.

Billing

DRM encryption uses the pay-as-you-go billing method with no minimum fees. Charges consist of two parts:

Charge type When charged
Transcoding fee When a video is transcoded with DRM encryption enabled.
License fee Each time a device requests a license to play a DRM-encrypted video.

For pricing details, see DRM encryption.

Get started

  1. Apply for a FairPlay Streaming certificate

  2. Configure DRM encryption