GiliSoft Video DRM Protection

Create protected videos and manage how viewers open them. Follow the complete setup, packaging, password, and player workflow for your courses, client recordings, and licensed content.

  • Create protected files and choose the playback binding mode
  • Set viewer watermarks, access dates, and playback limits
  • Issue Playback Passwords and manage cancelled access
GiliSoft Video DRM Protection illustration of protected playback, viewer identification, access time, and cancelled access

How to Use GiliSoft Video DRM Protection

Choose a task to protect videos, create viewer Playback Passwords, set access rules, or manage a delivered course. The tutorials cover the Windows publisher workflow and the matching player, password, and device checks for viewers.

What Would You Like to Do?

Package Videos and Choose Binding

Issue Passwords and Set Access Limits

Configure Playback and Presentation

Verify Delivery and Manage Access

Create a Protected Video Package

Add a course, client recording, or licensed video in DRM Video. Common source formats include MP4, AVI, WMV, MPG, RM, RMVB, FLV, and VOB. For documents and web content, use the matching DRM Office, DRM PPT, DRM PDF, or DRM WebPage workspace.

The screenshots show 9.x interfaces. Some output formats and controls require a paid edition; use the options enabled in your installed version.

Add the source videos

Open GiliSoft Video DRM Protection on Windows and choose DRM Video. Use Add Files/Folders or drag the videos into the workspace. Review the file list and keep the original recordings separate from the protected output.

Choose DRM Video and add the source lessons or recordings for this delivery.

Save the project key and choose playback binding

Open Encryption Settings. Record the Encryption Key and Project ID securely, select the output format available in your edition, and choose fixed-password or device-bound playback for this delivery. Keep the Encryption Key with the publisher, not in the viewer delivery folder.

A GEM output requires the matching external player; an EXE is a Windows executable. The pictured screen also shows a user-defined format option for Deluxe. Choose the format and player for the intended viewer platform before creating a batch.

Record the project values and select the output and playback mode available in your edition.

Follow the separate fixed-password, PC Binding, USB Disk Binding, or disc delivery task below.

Configure the playback rules for this delivery

Use Advanced Settings for watermark appearance, anti-copy restrictions, optional questions, viewer messages, and blacklist verification. Configure any online blacklist checks before exporting. Viewer-specific watermark text, expiration, and play limits are entered when creating the Playback Password.

Open the task for watermark style, anti-copy controls, questions, viewer messages, or blacklist verification when you need it. Keep online verification compatible with the internet restrictions you select.

Choose the destination and create the protected output

Open Output, select a destination separate from the source files, and choose one combined package or separate packages. Select Encrypt now! and wait for completion. Then prepare the matching player and issue a Playback Password for the chosen binding mode before testing the delivery.

Choose the destination and packaging method, start encryption, and wait for the output to complete.

The illustrated progress is 0.0%, not a completed export. Keep the saved key and Project ID with your publisher records. For PC Binding, the viewer next opens the completed output on the intended computer to obtain its Machine Code; follow Create a Viewer Playback Password.

Project Keys, Viewer Codes, and Passwords

Encryption Key
The publisher key used for this protected output and for generating its Playback Passwords. Save the matching value securely; never send it to viewers.
Playback Password
The generated credential sent to a viewer. Keep an issuance record with its project, viewer, approved device, watermark, and limits.
Machine Code
The identifier obtained from the intended viewer computer for PC Binding. Do not substitute the publisher's test computer or the Project ID.
Project ID
The course, client, or edition label used to find the matching Encryption Key and delivery records later.

Projects are created and managed on Windows. Protected playback on other desktop or mobile platforms requires the appropriate output and supported GiliSoft player; a Windows EXE is not a universal mobile player.

Choose Shared Access, PC Binding, or Media Binding

Use a Fixed Playback Password

  1. Choose the fixed-password encryption mode

    In Encryption Settings, choose Fixed play password works on all computers when shared access across computers is intended. Keep the matching Encryption Key and Project ID.

  2. Create the protected output

    Configure the required settings and complete Output. This mode is different from an individual PC-bound credential.

  3. Generate the matching password

    Open Create Play Password, enter the saved Encryption Key, and leave User's Machine Code empty as instructed by that dialog. Set any required limits, then create and record the resulting Playback Password.

  4. Test the intended shared access

    Use the completed output, matching player, and generated password on the computers intended for this delivery. Treat the fixed credential as shareable; choose PC Binding when access must be tied to one computer.

See the Create Play Password screenshot for the empty Machine Code instruction.

Bind Playback to a Windows PC

  1. Choose computer-bound playback

    In Encryption Settings, choose the mode where one play password works on only one computer with hardware binding. Review the computer hardware choices offered by the installed edition.

  2. Export and obtain the viewer Machine Code

    Complete the protected output, then have the viewer open it on the intended Windows PC with its required player. Ask the viewer to send the Machine Code shown there.

  3. Generate the PC-bound Playback Password

    Open Create Play Password, enter the matching Encryption Key and that exact User's Machine Code, set the viewer text and limits, and generate the credential. Follow the password task for the complete sequence.

  4. Verify the correct and wrong computers

    Test the issued credential on its approved PC and on a different PC. For a second approved computer, obtain that computer's Machine Code and issue access for it rather than reusing the first PC's credential.

The Encryption Settings screenshot shows the password mode and hardware-binding controls. For delivery-specific guidance, see bind video playback to a PC or storage device.

Bind Playback to a USB Drive

  1. Select the removable-media binding mode

    In Encryption Settings, use the device-bound mode and choose Bind USB disk or Removable disk where enabled. Keep a record of the intended delivery device.

  2. Prepare the bound output for that device

    Follow the installed edition's device-selection and output prompts for the target USB drive. Complete encryption, retain the publisher key, and prepare the matching player and viewing credential. Simply putting an ordinary encrypted file on a USB drive does not establish USB binding.

  3. Test the USB delivery and a copied package

    Open the completed delivery with the intended USB device connected. Also test the package copied away from that device, using the same viewing setup. Confirm the configured media binding controls playback rather than judging protection only by whether the file can be copied.

See Encryption Settings for the removable-disk binding control and protect videos shared on USB for the delivery checklist.

Prepare a Disc-Bound Delivery

  1. Choose the available CD Binding workflow

    Use CD Binding when it is offered by your installed edition for CD/DVD delivery. Confirm the target media and reader requirements for that workflow before preparing copies.

  2. Create the delivery for the intended disc

    Follow that workflow's media-selection and output instructions to create the protected delivery, then prepare its required player and credential. Do not assume burning an ordinary GEM or EXE file to a disc establishes disc binding.

  3. Verify playback from the actual media

    Test the delivered CD/DVD in the intended reader and attempt playback of a copy moved away from it. Check the configured binding and include the correct player and viewer instructions with the disc.

The illustrated Encryption Settings screen shows PC and USB controls, not a CD setup dialog. Use the CD Binding controls supplied by the edition you install.

Issue Passwords and Control Viewer Access

Create a Viewer Playback Password

  1. Locate the matching project key

    Use the saved Project ID to find the Encryption Key used for this output. Open Create Play Password and enter that key; the project label is not a replacement for it.

  2. Fill in the Machine Code for PC Binding

    Enter User's Machine Code exactly as supplied from the intended viewer computer. For fixed-password playback, follow the dialog instruction to leave it empty. Do not mix codes from a support PC and the viewer PC.

  3. Enter the viewer watermark text

    In Text Watermark, enter a learner name, client ID, or short delivery label. The appearance comes from Basic Settings, not from this text field.

  4. Choose the viewer access limits

    Enable and set only the required expiration, play-count, seeking, or preview restrictions. Follow expiration and playback limits to check their behavior.

  5. Create, record, and send the credential

    Select Create Play Password, then use Copy Play Password or Export Password when enabled. Send the resulting Playback Password to the viewer and retain the publisher key and issuance record privately.

Use the matching publisher key and viewer Machine Code for PC Binding, then generate the Playback Password.
FieldHow to use it
Text WatermarkSet the viewer identifier; its appearance follows the watermark style configured in Basic Settings.
Expiration DateEnter the intended end date explicitly. Do not assume the field starts a fixed access period at first playback.
Play Count LimitUse only when the viewing policy requires it; allow for restarts and normal revision.
Disable seek videoRestrict jumping through the video only when that behavior is required.
Verification methodReview the method offered by the installed version and test its behavior with the intended connection and date setup.

For credential-specific questions, see Playback Passwords and publisher keys.

Set Expiration and Playback Limits

  1. Open the matching password setup

    In Create Play Password, enter the project Encryption Key and the correct Machine Code when PC Binding is used. Set the limits before generating the viewer credential.

  2. Set the explicit end date and verification method

    Enable Expiration Date and enter the intended calendar date. Review Verification method when enabled. This is an end-date field, not an automatic number of days from first playback.

  3. Set play count, seeking, or preview restrictions

    Enable Play Count Limit and enter the allowed count if required. Use Disable seek video only when jumping through the lesson must be restricted. Review the separate Video Viewing Restrictions (seconds) field if a limited preview is intended.

  4. Generate and test a sample credential

    Create the password, record its rules, and test permitted playback and the configured limit with sample access rather than consuming a learner's live allowance. If the viewer policy changes later, do not assume editing the publisher dialog rewrites an already-issued password.

The password maker screenshot shows these checkboxes and fields. Read disable access after expiration for the end-date workflow.

Add a Viewer Watermark

  1. Choose the watermark appearance before export

    Open Advanced Settings > Basic Settings. Select a floating watermark across the player, a floating edge watermark, or a fixed position. Set movement frequency, font color, font size, and spacing with the available controls.

  2. Set the viewer text when issuing access

    Create the protected output with that style. In Create Play Password, enter the viewer or delivery identifier in Text Watermark, then generate that viewer's credential.

  3. Verify the completed playback

    Play the delivered output with the generated password and inspect slides, faces, and captions. Adjust style before creating a replacement output if needed; changing the publisher settings does not update an old delivered copy.

Basic Settings controls the watermark's appearance; its viewer-specific text is entered in Create Play Password.

Watermark appearance and viewer text are separate settings. See brand training videos with viewer watermarks for placement considerations.

Open a Protected Video as a Viewer

  1. Use the delivered output and matching player

    Keep the protected file with the player or player instructions supplied by the publisher. Use the application intended for that protected format and platform, rather than assuming an ordinary video player will open it.

  2. Use the approved computer or delivery media

    For PC Binding, open the content on the intended Windows computer. For USB or CD Binding, use the approved delivery device or disc. Keep the required online verification available.

  3. Obtain the issued Playback Password

    For PC Binding, send the displayed Machine Code to the publisher and receive the generated Playback Password. Do not ask for the publisher Encryption Key or substitute another computer's password.

  4. Enter the credential and check playback

    Enter the supplied Playback Password and check the intended lesson, audio, watermark, and access rules. If playback fails, send the exact error and delivery details to the publisher and follow playback troubleshooting.

Configure Playback and Viewer Presentation

Configure Anti-Copy Controls

  1. Open Anti-Copy Settings

    Go to Advanced Settings > Anti-Copy Settings. Review the available virtual-machine, screenshot, input, and process restrictions for the intended viewing environment.

  2. Enable the controls needed by the delivery

    Choose only the required checks. The pictured interface includes screenshot restrictions, keyboard or mouse restrictions, Intelligent Anti-Copy, and a list of programs not allowed to run with one process name per line. Keep online blacklist verification compatible with your internet policy.

  3. Export and test normal and restricted playback

    Build a sample output and check permitted viewing, seeking, and the software capture or environment restriction you enabled. Use viewer watermarks alongside these controls; an external camera filming a screen is not blocked by a software capture setting.

Enable the checks needed by the project and test them with the intended player and viewer environment.
Online checks need connectivity. Do not combine required online blacklist verification with the option that forbids playback while connected to the internet. Test the actual delivery configuration rather than promising every recording method is blocked.

Add Playback Questions

  1. Select a question mode

    Open Advanced Settings > Anti-Copy Questions. Choose Automatic QA Mode for the simple questions described by the interface, or Customized QA Mode for your own prompts.

  2. Set the question and timing

    For automatic questions, review Frequency of QA (Mins). For custom questions, fill Question, Answer, and Time to pop up the question (Mins), then use Add Question. Review the resulting list.

  3. Create a sample output and test interruptions

    Play through the relevant times, check the question and answer behavior, and adjust the frequency before releasing the course. Use Delete Question or Clear Question when removing unwanted entries.

If questions are needed, set the question mode and timing, then test their effect on viewing.

Customize Viewer Messages and Links

  1. Open Ad settings and choose the needed prompts

    In Advanced Settings > Ad settings, enable start or end website pop-ups only when required. Enter the destination links for those selected events.

  2. Edit verification and player text

    Use Notification of Verification for viewing instructions. Fill the player title, verification title, purchase text, and purchase link fields that your delivery needs. Keep the publisher Encryption Key out of these messages.

  3. Export and verify the viewer presentation

    Open the completed output, inspect the verification prompt and titles, and check every enabled link at the relevant playback event. Correct the package settings before distribution if a link or message is wrong.

Use the available fields for viewer instructions and presentation, then verify the completed player.

Prepare the Player and Toolbox Utilities

  1. Open Toolbox and select the delivery tool

    Use Create Your Player when preparing the player for your protected output. Create Password opens the access utility; Upload Password Blacklist supports the configured cancellation workflow.

  2. Prepare the player and supporting materials

    Follow the selected tool's prompts for the intended output. Use Custom Player Icon and Sign Your Player.exe when your Windows release process requires them. The Password Generation API Pack is an integration tool, not a viewer credential.

  3. Test the exact delivery folder

    Open the protected content with the player you intend to distribute and a sample Playback Password. Send the protected files, required player instructions, and viewer credential, while keeping source videos and publisher keys out of the delivery.

The toolbox groups password creation, blacklist upload, player preparation, and supporting delivery tools.
Tool shownUse in the workflow
Create PasswordOpen the utility used to generate viewer Playback Passwords.
Upload Password BlacklistManage the blacklist upload step for the configured cancellation workflow.
Create Your PlayerPrepare the player used for your protected delivery.
Custom Player IconUse the player icon customization tool when preparing a branded delivery.
Sign Your Player.exeOpen the player-signing utility as part of the release workflow.
Password Generation API PackReview the integration tools available for a development project; keep its key material with the publisher.

Verify Delivery and Manage Issued Access

Enable Blacklist Verification Before Export

  1. Enable the project blacklist check

    Open Advanced Settings > Play Password Blacklist and enable Enable Password Blacklist before creating the protected output.

  2. Secure the administration access

    Use the administration login for the configured verification setup. Replace any default administrator password before release, and keep the service and administration details with the project records.

  3. Create the verification-enabled output

    Complete the remaining project settings and export the protected package. Keep its verification service reachable under the anti-copy and internet rules you chose.

  4. Test with a sample password before delivery

    First establish successful playback on its intended device. Add that sample Playback Password through the configured management tool or service, save or upload the change, and verify rejection after the player checks the updated list.

Configure online blacklist verification before creating the protected output if later cancellation is required.

This screen configures verification and administrator access; it is not a screenshot of the later blacklist-entry form. A package delivered without this setup does not acquire it merely because a new list is created later.

Revoke an Issued Playback Password

  1. Find the exact issued credential

    Match the viewer, project, and approved device in your issuance records. Cancel the Playback Password, not the publisher Encryption Key or Machine Code. Confirm that this delivered package already uses the configured blacklist.

  2. Update the configured blacklist

    Open the management service or the Upload Password Blacklist workflow from Toolbox. Add the issued Playback Password and save or upload the updated list through the configured service.

  3. Retest on the intended device

    Use the same approved device on which that sample credential previously worked, with online verification available. Confirm it is rejected after the player checks the updated list; testing only on a wrong PC does not prove revocation.

  4. Check unaffected access and record the change

    Test a separate valid credential on its approved device and record the cancellation. A shared credential affects its whole group. Revocation does not remotely delete files or immediately update a disconnected player.

Follow how to revoke video access after delivery for cancellation scenarios and the before-and-after test.

Test Allowed and Blocked Playback

  1. Establish an authorized sample playback

    Use the exact protected output and player to be delivered, a valid sample password, and the approved device or media. Check video, sound, captions, and the viewer watermark.

  2. Test the selected binding rule

    Try a PC-bound credential on another computer, or a media-bound package copied away from its intended USB drive or disc. Check the configured playback result rather than whether the file itself copies.

  3. Check the configured limits and cancellation

    Use sample access to test seeking, replay, the intended expiration behavior, and any play or preview limit. For blacklist testing, first prove the credential works on its intended device, then cancel and retest that same access after verification.

  4. Release the tested files and preserve the project record

    Confirm a separate valid credential still works on its approved device. Keep the Project ID, Encryption Key, output edition, player version, and issuance records privately so later support and access changes use the correct project.

TestExpected behavior
Correct output, player, credential, and approved deviceThe video opens with sound, the intended watermark, and any required captions.
PC-bound password used on another computerThe first computer's credential does not authorize that other PC.
Storage-bound file copied away from the intended mediaThe copied package does not become unrestricted content.
Pause, seeking, replay, and access end dateThe configured rules match the viewing policy and do not interrupt normal use unexpectedly.
A test password added to the configured blacklistIt is rejected on its intended device after the player checks the updated list; a different valid credential still works on its own approved device.

Use sample credentials for these tests rather than consuming a live viewer's limited play count.

Fix a Protected Video That Will Not Play

  1. Identify the failing delivery and access record

    Record the protected output, Project ID, player version, exact error message, and intended PC or media. Find the matching publisher record without posting its Encryption Key publicly.

  2. Check credentials, binding, and access limits

    Compare the saved key and issued Playback Password with the output. For PC Binding, verify the intended Machine Code; for media binding, use the approved device. Check expiration, play count, preview limits, and the configured blacklist.

  3. Check the complete file, player, and verification path

    Confirm the protected file copied completely, use the matching player, and test the required connectivity. Review conflicts between online checks and internet restrictions. Retest with a known-valid sample on its approved device before changing the delivery.

SymptomCheck
Playback Password is rejectedMatch the delivered project, saved Encryption Key, and issued credential. For PC Binding, compare the intended Machine Code.
Video opens on one PC but not anotherCheck whether PC Binding is selected. Issue access for the second approved Machine Code rather than reusing the first PC's credential.
Previously working access has endedReview the expiration date, play count, and any entry in the configured password blacklist.
Online verification does not workCheck service connectivity and the package's verification setup. Review conflicting internet restrictions in Anti-Copy Settings.
File does not open in the selected applicationConfirm the protected file copied completely and use the player intended for that output and target platform.
Watermark text or position is wrongCheck the viewer Text Watermark in the password record and the appearance configured in Basic Settings. Verify the actual completed playback.

Keep the exact error and test results with the support record. Do not replace a device-bound credential with an unrelated fixed password simply to bypass a failed check.

Video DRM Protection Guide FAQ

Is the Encryption Key the viewer password?

No. Keep the Encryption Key in the publisher's project records and use it when creating Playback Passwords. Send viewers the resulting Playback Password, not the Encryption Key.

When is a Machine Code required?

A Machine Code is required for PC Binding. The viewer opens the protected content on the intended Windows computer and sends that code to the publisher, who creates a Playback Password for that computer.

Should I choose a fixed password or PC Binding?

Use a fixed password when viewing across computers is intentional and a shared credential is acceptable. Use PC Binding when a password should authorize one approved Windows computer. Keep a record for each approved computer if a viewer uses more than one.

What is the difference between GEM and EXE output?

GEM output is opened through the intended GiliSoft playback workflow. EXE is a Windows executable output. Available formats depend on the installed edition; choose the output and player for the viewer's platform rather than assuming one format runs everywhere.

Where do I set the watermark style and viewer text?

Set fixed or floating watermark placement, movement frequency, font, and spacing in Advanced Settings > Basic Settings. Enter viewer-specific Text Watermark when creating the Playback Password. Check the completed playback so the watermark does not cover captions or essential content.

Does an expiration date start counting from first playback?

The password maker shows an explicit expiration date. Enter the intended end date and choose the verification method available in your setup. Do not assume that the date field automatically creates a period beginning at first activation.

Can a leaked Playback Password be disabled?

Yes, when online blacklist verification was configured before the protected output was delivered. Add the issued Playback Password to that configured blacklist. Rejection takes effect when the player checks the updated online list; a disconnected player does not receive the change immediately.

Can playback be tied to a USB drive or disc?

Yes. USB Disk Binding and CD Binding associate playback with the selected delivery media. Test both the intended media and a copy moved elsewhere; protection controls access to the content rather than making the package file impossible to copy.

Can viewers play protected videos outside Windows?

Projects are created and managed on Windows. Protected playback can be delivered through supported GiliSoft players on desktop and mobile platforms, depending on the output and player selected. The Machine Code instructions in this guide describe PC-bound Windows playback.

Why should I keep the Project ID?

The Project ID identifies the course, client delivery, or content edition so you can find its matching Encryption Key and access records later. Keep both values in the publisher archive; the label alone is not a substitute for the correct key or viewing credential.

Why can a protected video file still be copied?

The package may still be copied or forwarded. The selected password, device or media binding, expiration, and verification rules govern whether its contents may be played. Test an unauthorized playback attempt rather than relying only on whether Windows allows the file to be copied.

Does anti-copy protection block every recording method?

Anti-copy settings can restrict supported software capture paths, and viewer watermarks add traceability. They cannot stop an external camera filming a screen or guarantee that every recorder is blocked. Test the settings with the player and environment used by viewers.

Should I use Video DRM or ordinary video encryption?

Use Video DRM when you need continuing access rules such as device binding, viewer watermarks, expiration, play limits, or blacklist verification. A fixed-password encrypted delivery may be sufficient when those individual access controls are unnecessary.

Video DRM Help by Topic

Use this page for the complete product workflow. The guides below go deeper into a particular access rule or delivery scenario.

Protect Your Videos and Manage Viewer Access

Start with a sample video, configure the project, create a viewer Playback Password, and verify the complete delivery with GiliSoft Video DRM Protection.