Should ISOs created with MPF be accessible?

[DQduck]

Hi, I'm not sure if the following should have worked or not. However I at least expected it to and the stated error messages kinda do not make sense (to me).

I first created a dump of a BD with MPF (media preservation frontend) that was reported as successful. Then I mounted it using DaemonTools and pointed MakeMKV towards the virtual drive to convert it into MKV files.

MakeMKV failed to open it. I then checked the BEE flags and the first two bytes were all zero. So even though it has AACS v16 it should have worked, right?
But instead MakeMKV showed an error about the host certificate being revoked by the drive. Which I'd be surprised by the DaemonTools virtual drive actually having done.

(I don't have a LibreDrive yet, but as far as I understood it, at worst I'd have ended up with an BEE encrypted image but as it isn't it should have been accessible by MakeMKV, right?)

[attachment=0]Screenshot 2025-12-17 135432.png[/attachment]

[MartyMcNuts]

Hi, I'm not sure if the following should have worked or not. However I at least expected it to and the stated error messages kinda do not make sense (to me).

I first created a dump of a BD with MPF (media preservation frontend) that was reported as successful. Then I mounted it using DaemonTools and pointed MakeMKV towards the virtual drive to convert it into MKV files.

MakeMKV failed to open it. I then checked the BEE flags and the first two bytes were all zero. So even though it has AACS v16 it should have worked, right?
But instead MakeMKV showed an error about the host certificate being revoked by the drive. Which I'd be surprised by the DaemonTools virtual drive actually having done.

(I don't have a LibreDrive yet, but as far as I understood it, at worst I'd have ended up with an BEE encrypted image but as it isn't it should have been accessible by MakeMKV, right?)

Screenshot 2025-12-17 135432.png

ISO's generally don't have all of the data from the disc. Pressed blu-ray discs have a section of the disc that is not copied when creating an ISO and MakeMKV needs to read this section of the disc, so no, ISO's generally don't work unless created with libredrive enabled at the time.

Some folks have done this by opening MakeMKV to enable libredrive then use ImgBurn to create an ISO. I'm pretty sure this encrypted ISO can then be opened in MakeMKV.

[DQduck]

Hi what section is missing? I thought it was the keys for the Bus Encryption which would show up as the first bit of the second byte of the /AACS/Content000.cer being set to 1 (BEE enabled). And libre drive would allow one to read the raw disk without the drive encrypting it where that bit then would be set to 0 (BEE disabled).

Is there more? What else is redumper (which is what the MPF tool uses by default) leaving out? Would Aaru include that part?

[MartyMcNuts]

Hi what section is missing? I thought it was the keys for the Bus Encryption which would show up as the first bit of the second byte of the /AACS/Content000.cer being set to 1 (BEE enabled). And libre drive would allow one to read the raw disk without the drive encrypting it where that bit then would be set to 0 (BEE disabled).

Is there more? What else is redumper (which is what the MPF tool uses by default) leaving out? Would Aaru include that part?

I can't remember off the top of my head what the section is called but it is a non-copyable section that contains the VolumeID which is needed for AACS decryption. Without it the AACS decryption process cannot be followed and keys cannot be derived.

[keydb_helper]

I can't remember off the top of my head what the section is called but it is a non-copyable section that contains the VolumeID which is needed for AACS decryption. Without it the AACS decryption process cannot be followed and keys cannot be derived.

Exactly right. A raw ISO dump will not contain the volume ID, but this can be mitigated by using the external public keydb. MakeMKV will avoid performing the full AACS authentication process when the disc keys are locally available in the keydb file.

MakeMKV actually documented this use case in the FAQ (Archive.org link as the FAQ is inaccessible: Link)

I first created a dump of a BD with MPF (media preservation frontend) that was reported as successful. Then I mounted it using DaemonTools and pointed MakeMKV towards the virtual drive to convert it into MKV files.
...
But instead MakeMKV showed an error about the host certificate being revoked by the drive. Which I'd be surprised by the DaemonTools virtual drive actually having done.

The host certificate issue you observed was due to DaemonTools not being able to emulate a licensed Blu-ray drive in response to MakeMKV trying to perform the AACS authentication process. It shouldn't be interpreted as DaemonTools actually revoking any host certificates.

[DQduck]

Mybe I was confusing some things then because of your LibreDrive mention (which is required for dealing with Buss Encryption but not for dealing with AACS).

I've now dumped the AACS keys as well and the FindVUK tool passes validation on the mounted ISO. But MakeMKV still isn't able to access it.

When I use the MakeMKV integration for VLC it can't play them either. HOWEVER when I use the libaacs and libbdplus from https://github.com/KnugiHK/libaacs-libbdplus-windows instead it works just fine (now).

Does MakeMKV not look into

Code: Select all

%AppData%/aacs/keydb.cfg

?

Code: Select all

MakeMKV v1.18.2 win(x64-release) started
Using direct disc access mode
Loaded content hash table, will verify integrity of M2TS files.
Error 'Scsi error - ILLEGAL REQUEST:INVALID FIELD IN CDB' occurred while issuing SCSI command A30..0020..03F to device 'SPTI:\Device\CdRom3'
Error 'Scsi error - ILLEGAL REQUEST:INVALID FIELD IN CDB' occurred while issuing SCSI command A40..0020..03F to device 'SPTI:\Device\CdRom3'
...
Can't read AACS VID from disc - most likely current AACS host certificate is revoked by your drive

@keydb_helper as you said

MakeMKV will avoid performing the full AACS authentication process when the disc keys are locally available in the keydb file.

am I doing something wrong then???