AACS host certificate error from flashed drive

Forum for discussions about UHD-capable dives
rippingdownthehouse
Posts: 6
Joined: Sat Apr 04, 2026 2:27 am

AACS host certificate error from flashed drive

Post by rippingdownthehouse » Sat Apr 04, 2026 2:51 am

I picked up two Xforte drives recently and was under the impression that I had successfully flashed them. Unfortunately, today I found out that one of them is continuously returning the following (truncated by me) error with a UHD disc:

Code: Select all

Loaded content hash table, will verify integrity of M2TS files.
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT PRESENT' occurred while issuing SCSI command A40..002000800 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Can't read AACS VID from disc - most likely current AACS host certificate is revoked by your drive
Saved AACS dump file as <snip>.tgz
LibreDrive compatible drive is required to open this disc - video can't be decrypted.
Failed to open disc
* Flashing was done on Windows using SDFtool Flasher (v1.3.6)
* The "good" drive is fine and can read everything I've put in it, which rules out a disc issue. The two drives seem to report different names/part numbers out of the box, but both should now be flashed the same.
* Both drives are flashed with them DE_LG_BU40N_1.03_MK.bin
* Both drives can rip standard Blu-Ray fine (the problematic one had no issues there)
* I should probably note that in order to flash the problematic drive in the first place, I had to do some enclosure swapping - but once I did then everything flashed fine. Not sure if that matters.
* I've seen these issues on both Linux and Windows (neither were a VM)
* I've power-cycled the Windows computer to no avail

Is there something I've missed here in the flashing? As I understand it, once I am running a flashed drive with LibreDrive support, I should not be seeing these issues (and I don't on one drive!).

Per the usual request, I've included the problematic drive information:

Code: Select all

Drive Information
OS device name: F:
Current profile: BD-ROM
Manufacturer: HL-DT-ST
Product: BD-RE BU40N
Revision: 1.03
Serial number: 812HS029741
Firmware date: 2118-10-24 19:34
Bus encryption flags: 17
Highest AACS version: 76

LibreDrive Information
Status: Enabled
Drive platform: MT1959
Firmware type: Patched (microcode access re-enabled)
Firmware version: 1.03
DVD all regions: Yes
BD raw data read: Yes
BD raw metadata read: Yes
Unrestricted read speed: Yes

Disc Information
Label: POLICE STORY 2 4K UHD
Timestamp: 2022-07-03 19:59:23
Protection: AACS2.0/C v76
Data capacity: 91.57 Gb
Disc type: BD-ROM UHD
Number of layers: 3
Bus encryption flags: 80

MartyMcNuts
Posts: 4809
Joined: Wed Nov 22, 2017 11:45 pm

Re: AACS host certificate error from flashed drive

Post by MartyMcNuts » Sat Apr 04, 2026 6:31 am

rippingdownthehouse wrote:
Sat Apr 04, 2026 2:51 am
I picked up two Xforte drives recently and was under the impression that I had successfully flashed them. Unfortunately, today I found out that one of them is continuously returning the following (truncated by me) error with a UHD disc:

Code: Select all

Loaded content hash table, will verify integrity of M2TS files.
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT PRESENT' occurred while issuing SCSI command A40..002000800 to device 'SPTI:\Device\CdRom0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SPTI:\Device\CdRom0'
Can't read AACS VID from disc - most likely current AACS host certificate is revoked by your drive
Saved AACS dump file as <snip>.tgz
LibreDrive compatible drive is required to open this disc - video can't be decrypted.
Failed to open disc
* Flashing was done on Windows using SDFtool Flasher (v1.3.6)
* The "good" drive is fine and can read everything I've put in it, which rules out a disc issue. The two drives seem to report different names/part numbers out of the box, but both should now be flashed the same.
* Both drives are flashed with them DE_LG_BU40N_1.03_MK.bin
* Both drives can rip standard Blu-Ray fine (the problematic one had no issues there)
* I should probably note that in order to flash the problematic drive in the first place, I had to do some enclosure swapping - but once I did then everything flashed fine. Not sure if that matters.
* I've seen these issues on both Linux and Windows (neither were a VM)
* I've power-cycled the Windows computer to no avail

Is there something I've missed here in the flashing? As I understand it, once I am running a flashed drive with LibreDrive support, I should not be seeing these issues (and I don't on one drive!).

Per the usual request, I've included the problematic drive information:

Code: Select all

Drive Information
OS device name: F:
Current profile: BD-ROM
Manufacturer: HL-DT-ST
Product: BD-RE BU40N
Revision: 1.03
Serial number: 812HS029741
Firmware date: 2118-10-24 19:34
Bus encryption flags: 17
Highest AACS version: 76

LibreDrive Information
Status: Enabled
Drive platform: MT1959
Firmware type: Patched (microcode access re-enabled)
Firmware version: 1.03
DVD all regions: Yes
BD raw data read: Yes
BD raw metadata read: Yes
Unrestricted read speed: Yes

Disc Information
Label: POLICE STORY 2 4K UHD
Timestamp: 2022-07-03 19:59:23
Protection: AACS2.0/C v76
Data capacity: 91.57 Gb
Disc type: BD-ROM UHD
Number of layers: 3
Bus encryption flags: 80
Most likely a power issue causing libredrive to not enable correctly. Use USB-C if possible and use posts direct from the motherboard (not case ports) or an AC self-powered USB hub of at least 24w.

Then let the OS initialise the UHD disc and once you can see the disc in explorer, then you can open the MakeMKV application.
Cheers :D
----------------------------------------------------------------------------------------------------------------------------
For UHD enabled drives (AU/NZ/SG + Others) & DIY Single Drive Flasher (WW): https://uhdenableddrives.com

rippingdownthehouse
Posts: 6
Joined: Sat Apr 04, 2026 2:27 am

Re: AACS host certificate error from flashed drive

Post by rippingdownthehouse » Sat Apr 04, 2026 12:41 pm

MartyMcNuts wrote:
Sat Apr 04, 2026 6:31 am

Most likely a power issue causing libredrive to not enable correctly. Use USB-C if possible and use posts direct from the motherboard (not case ports) or an AC self-powered USB hub of at least 24w.

Then let the OS initialise the UHD disc and once you can see the disc in explorer, then you can open the MakeMKV application.
Unfortunately, this does not seem to be the solution.

* I was using USB-3 case ports before on the Windows machine
* The Linux machine was USB-3 ports as well, although they were motherboard ports (although upon a re-test, it's not giving me explicitly a key error, it just magically can't read after the first "info" check)
* On Windows, I switched the problematic drive to use the single USB-C port on the motherboard via an adapter included with the drive.
* I attached the drive, inserted the disc, waited for Windows to pop up the disc notification. Same error.
* I switched the cable I was using from the adaptor to a known good bidirectional USB-C cable and repeated the process. Same error.
* I don't currently have a hub available (I can still try it in a few days), but the motherboard should be providing all necessary power.

Is there a different way to "let the OS initialise the UHD disc?" Or am I just encountering a particularly special bug/edge case here?

I appreciate the help!

MartyMcNuts
Posts: 4809
Joined: Wed Nov 22, 2017 11:45 pm

Re: AACS host certificate error from flashed drive

Post by MartyMcNuts » Sat Apr 04, 2026 11:08 pm

rippingdownthehouse wrote:
Sat Apr 04, 2026 12:41 pm
MartyMcNuts wrote:
Sat Apr 04, 2026 6:31 am

Most likely a power issue causing libredrive to not enable correctly. Use USB-C if possible and use posts direct from the motherboard (not case ports) or an AC self-powered USB hub of at least 24w.

Then let the OS initialise the UHD disc and once you can see the disc in explorer, then you can open the MakeMKV application.
Unfortunately, this does not seem to be the solution.

* I was using USB-3 case ports before on the Windows machine
* The Linux machine was USB-3 ports as well, although they were motherboard ports (although upon a re-test, it's not giving me explicitly a key error, it just magically can't read after the first "info" check)
* On Windows, I switched the problematic drive to use the single USB-C port on the motherboard via an adapter included with the drive.
* I attached the drive, inserted the disc, waited for Windows to pop up the disc notification. Same error.
* I switched the cable I was using from the adaptor to a known good bidirectional USB-C cable and repeated the process. Same error.
* I don't currently have a hub available (I can still try it in a few days), but the motherboard should be providing all necessary power.

Is there a different way to "let the OS initialise the UHD disc?" Or am I just encountering a particularly special bug/edge case here?

I appreciate the help!
Since you are using Linux, BU40N 1.00 firmware should be used, not 1.03-MK. Flash BU40N 1.00 and see if that fixes it.

Have you cleaned the UHD disc? Even if they look pristine, give'em a clean! This often resolves issues with discs not being read.
Cheers :D
----------------------------------------------------------------------------------------------------------------------------
For UHD enabled drives (AU/NZ/SG + Others) & DIY Single Drive Flasher (WW): https://uhdenableddrives.com

rippingdownthehouse
Posts: 6
Joined: Sat Apr 04, 2026 2:27 am

Re: AACS host certificate error from flashed drive

Post by rippingdownthehouse » Mon Apr 06, 2026 5:50 pm

Pretty sure it's not the disc, since the other drive can rip fine.

Is BU40N 1.00 preferred on Windows as well?

OneDay
Posts: 29
Joined: Wed Jun 10, 2020 12:01 am

Re: AACS host certificate error from flashed drive

Post by OneDay » Mon Apr 06, 2026 9:40 pm

So let me get this straight, after flashing the problematic drive on the other enclosure did you do a test to see if the drive could read the uhd disc on the same enclosure?

MartyMcNuts
Posts: 4809
Joined: Wed Nov 22, 2017 11:45 pm

Re: AACS host certificate error from flashed drive

Post by MartyMcNuts » Mon Apr 06, 2026 10:35 pm

rippingdownthehouse wrote:
Mon Apr 06, 2026 5:50 pm
Pretty sure it's not the disc, since the other drive can rip fine.

Is BU40N 1.00 preferred on Windows as well?
I think BU40N 1.03-MK has rad issues on Linux but BU40N 1.00 works fine. I always put BU40N 1.00 on these drives as it is compatible with all UHD ripping software, not just MakeMKV and Xreveal.
Cheers :D
----------------------------------------------------------------------------------------------------------------------------
For UHD enabled drives (AU/NZ/SG + Others) & DIY Single Drive Flasher (WW): https://uhdenableddrives.com

rippingdownthehouse
Posts: 6
Joined: Sat Apr 04, 2026 2:27 am

Re: AACS host certificate error from flashed drive

Post by rippingdownthehouse » Mon Apr 06, 2026 10:38 pm

So let me get this straight, after flashing the problematic drive on the other enclosure did you do a test to see if the drive could read the uhd disc on the same enclosure?
I'm not quite certain what you're asking, thanks to the three-card monte of it all.

Here's the series of steps I took (best as I can remember):
  • I bought two drives, I will refer to them as Generic+drive1 and HL-DT-ST+drive2 per their labels
  • I flashed Generic+drive1 to 1.00 and then to 1.03 (MakeMkv confirms)
  • I successfully ripped a UHD disc with Generic+drive1
  • I could not flash HL-DT-ST as it appeared that the board was blocking the flash commands
  • I swapped drive1 and drive2's enclosures
  • I flashed Generic+drive2 to 1.00 and then to 1.03 (MakeMkv confirms)
  • I swapped back the enclosures
  • I tried to rip the same UHD disc with HL-DT-ST+drive2, and get the Key errors
I could try and switch the drives again to see if it's the drive, although if so I would wonder why MakeMKV is reporting the patched microcode.
I think BU40N 1.03-MK has rad issues on Linux but BU40N 1.00 works fine. I always put BU40N 1.00 on these drives as it is compatible with all UHD ripping software, not just MakeMKV and Xreveal.
I'll try and roll back to 1.00 and see what happens.

MartyMcNuts
Posts: 4809
Joined: Wed Nov 22, 2017 11:45 pm

Re: AACS host certificate error from flashed drive

Post by MartyMcNuts » Mon Apr 06, 2026 10:50 pm

rippingdownthehouse wrote:
Mon Apr 06, 2026 10:38 pm
So let me get this straight, after flashing the problematic drive on the other enclosure did you do a test to see if the drive could read the uhd disc on the same enclosure?
I'm not quite certain what you're asking, thanks to the three-card monte of it all.

Here's the series of steps I took (best as I can remember):
  • I bought two drives, I will refer to them as Generic+drive1 and HL-DT-ST+drive2 per their labels
  • I flashed Generic+drive1 to 1.00 and then to 1.03 (MakeMkv confirms)
  • I successfully ripped a UHD disc with Generic+drive1
  • I could not flash HL-DT-ST as it appeared that the board was blocking the flash commands
  • I swapped drive1 and drive2's enclosures
  • I flashed Generic+drive2 to 1.00 and then to 1.03 (MakeMkv confirms)
  • I swapped back the enclosures
  • I tried to rip the same UHD disc with HL-DT-ST+drive2, and get the Key errors
I could try and switch the drives again to see if it's the drive, although if so I would wonder why MakeMKV is reporting the patched microcode.
I think BU40N 1.03-MK has rad issues on Linux but BU40N 1.00 works fine. I always put BU40N 1.00 on these drives as it is compatible with all UHD ripping software, not just MakeMKV and Xreveal.
I'll try and roll back to 1.00 and see what happens.
I've not yet seen this issue with the Xrtfore enclosures myself, only the Archgon enclosures. If the problem is the same as the Archgon, the enclosure cannot be used at all, even once the drive has been flashed as it does not allow commands to be passed through (including libredrive).

I have about 10 of the Xrtfore F03 model but haven't flashed them all as yet. I suppose I should get to it...
Cheers :D
----------------------------------------------------------------------------------------------------------------------------
For UHD enabled drives (AU/NZ/SG + Others) & DIY Single Drive Flasher (WW): https://uhdenableddrives.com

rippingdownthehouse
Posts: 6
Joined: Sat Apr 04, 2026 2:27 am

Re: AACS host certificate error from flashed drive

Post by rippingdownthehouse » Mon Apr 06, 2026 11:09 pm

Okay, I have reverted both drives back to 1.00, currently testing on Windows to eliminate any Linux weirdness.
Still seeing the same issue.

LibreDrive output for both:
LibreDrive Information
Status: Enabled
Drive platform: MT1959
Firmware type: Original (unpatched)
Firmware version: 1.00
DVD all regions: Yes
BD raw data read: Yes
BD raw metadata read: Yes
Unrestricted read speed: Yes
My current configuration is
* Generic+drive2
* HL-DT-ST+drive1

The facts on the ground:
* The Generic enclosure can rip UHD with both drive1 and drive2 on 1.00 and 1.03
* The HL-DT-ST can never rip UHD, regardless of drive or firmware (but can rip traditional Blu Ray)

Something about the HL-DT-ST enclosure is definitely jamming up things.
I've not yet seen this issue with the Xrtfore enclosures myself, only the Archgon enclosures. If the problem is the same as the Archgon, the enclosure cannot be used at all, even once the drive has been flashed as it does not allow commands to be passed through (including libredrive).
Ah, the joys of being the canary in the coal mine. I actually avoid the Archgons for that reason. Glad I got more than one, I guess, wish these things had SKUs. If you encounter this on one of yours and come up with a way around it, let me know. In case it's helpful, this is the model I got two of: https://www.amazon.com/XRTFORE-External ... l-MacBook/.

MartyMcNuts
Posts: 4809
Joined: Wed Nov 22, 2017 11:45 pm

Re: AACS host certificate error from flashed drive

Post by MartyMcNuts » Tue Apr 07, 2026 12:29 am

rippingdownthehouse wrote:
Mon Apr 06, 2026 11:09 pm
Okay, I have reverted both drives back to 1.00, currently testing on Windows to eliminate any Linux weirdness.
Still seeing the same issue.

LibreDrive output for both:
LibreDrive Information
Status: Enabled
Drive platform: MT1959
Firmware type: Original (unpatched)
Firmware version: 1.00
DVD all regions: Yes
BD raw data read: Yes
BD raw metadata read: Yes
Unrestricted read speed: Yes
My current configuration is
* Generic+drive2
* HL-DT-ST+drive1

The facts on the ground:
* The Generic enclosure can rip UHD with both drive1 and drive2 on 1.00 and 1.03
* The HL-DT-ST can never rip UHD, regardless of drive or firmware (but can rip traditional Blu Ray)

Something about the HL-DT-ST enclosure is definitely jamming up things.
I've not yet seen this issue with the Xrtfore enclosures myself, only the Archgon enclosures. If the problem is the same as the Archgon, the enclosure cannot be used at all, even once the drive has been flashed as it does not allow commands to be passed through (including libredrive).
Ah, the joys of being the canary in the coal mine. I actually avoid the Archgons for that reason. Glad I got more than one, I guess, wish these things had SKUs. If you encounter this on one of yours and come up with a way around it, let me know. In case it's helpful, this is the model I got two of: https://www.amazon.com/XRTFORE-External ... l-MacBook/.
Your Amazon link doesn't work.

The model I have is: https://www.amazon.com.au/XRTFORE-Exter ... 468&sr=8-2
Cheers :D
----------------------------------------------------------------------------------------------------------------------------
For UHD enabled drives (AU/NZ/SG + Others) & DIY Single Drive Flasher (WW): https://uhdenableddrives.com

rippingdownthehouse
Posts: 6
Joined: Sat Apr 04, 2026 2:27 am

Re: AACS host certificate error from flashed drive

Post by rippingdownthehouse » Tue Apr 07, 2026 12:49 am

Your Amazon link doesn't work.

The model I have is: https://www.amazon.com.au/XRTFORE-Exter ... 468&sr=8-2
Yep, that looks like the same model on another continent. May yours be better than mine.

MartyMcNuts
Posts: 4809
Joined: Wed Nov 22, 2017 11:45 pm

Re: AACS host certificate error from flashed drive

Post by MartyMcNuts » Tue Apr 07, 2026 1:08 am

rippingdownthehouse wrote:
Tue Apr 07, 2026 12:49 am
Your Amazon link doesn't work.

The model I have is: https://www.amazon.com.au/XRTFORE-Exter ... 468&sr=8-2
Yep, that looks like the same model on another continent. May yours be better than mine.
Mine are shipped from USA so they'd be from the same place. I'll have to test them all. Hopefully they all flash and read UHD discs.
Cheers :D
----------------------------------------------------------------------------------------------------------------------------
For UHD enabled drives (AU/NZ/SG + Others) & DIY Single Drive Flasher (WW): https://uhdenableddrives.com

MartyMcNuts
Posts: 4809
Joined: Wed Nov 22, 2017 11:45 pm

Re: AACS host certificate error from flashed drive

Post by MartyMcNuts » Tue Apr 07, 2026 5:53 am

I have come across 1 so far... This Xrtfore says HL-DT-ST and has the CB05 firmware version and shows no libredrive info in MakeMKV, which, to me, implies this enclosure is not allowing commands (including libredrive) to pass through.

Even using sdftool in the MakeMKV CLI shows nothing, just an error.

I haven't tried removing the drive from the enclosure yet. I've just set it aside for now and am checking others...

I have now come across another. This Xrtfore also says HL-DT-ST but has FR07 firmware and shows full drive info & libredrive info in MakeMKV. This one is actually UHD compatible OOTB but I have flashed it to BU40N 1.00 anyway and is now happily ripping away.

So I have worked out that the FR07 firmware from 2016 is UHD compatible OOTB just like BU40N 1.00. The FR07 firmware from 2018 is not.
Last edited by MartyMcNuts on Tue Apr 07, 2026 5:56 am, edited 1 time in total.
Cheers :D
----------------------------------------------------------------------------------------------------------------------------
For UHD enabled drives (AU/NZ/SG + Others) & DIY Single Drive Flasher (WW): https://uhdenableddrives.com

Billycar11
Posts: 5572
Joined: Sun Aug 24, 2014 5:49 am

Re: AACS host certificate error from flashed drive

Post by Billycar11 » Tue Apr 07, 2026 5:55 am

MartyMcNuts wrote:
Tue Apr 07, 2026 5:53 am
I have come across 1 so far... This Xrtfore says HL-DT-ST and has the CB05 firmware version and shows no libredrive info in MakeMKV, which, to me, implies this enclosure is not allowing commands (including libredrive) to pass through.

Even using sdftool in the MakeMKV CLI shows nothing, just an error.

I haven't tried removing the drive from the enclosure yet. I've just set it aside for now and am checking others...

I have now come across another. This Xrtfore also says HL-DT-ST but has FR07 firmware and shows full drive info & libredrive info in MakeMKV. This one is actually UHD compatible OOTB but I have flashed it to BU40N 1.00 anyway and is now happily ripping away.
how annoying they cant even standardize the cases
have you tried the force flash commands before taking it out?
Buy a drive from the guide and video maker: https://www.makemkv.com/forum/viewtopic ... 20&t=17831
UHD Drive Guide: https://www.makemkv.com/forum/viewtopic ... 16&t=19634
Auto flash kit $40 Email Billycar5924@gmail.com No attachments

Post Reply