UHD FAQ

[MrPenguin]

Also thanks MrPenguin for the clarification about the format. Wasn't aware it was standardized.

The KEYDB.cfg file format was created back in the early days of standard BluRays and HD-DVD, and so was designed to describe AACSv1. Any device keys, processing keys and host certificates that you will see in that file are all for AACSv1. UHD disks use AACSv2, which is an evolution of AACSv1 that allows a KEYDB.cfg file also to describe a UHD disk's DiscId, Media Key, Volume ID, Volume Unique Key and Unit Keys.

Any other notable features about a particular disk are (by convention) encoded in the entry's trailing comment:

• MKBvXX - the disk's Media Key Block version number.
• /BEE - this disk also uses bus encryption (some AACSv1 and all AACSv2 disks).
• /BD+ - this disk also uses BD+ content protection (some AACSv1 disks only).
• (BD) - a BluRay disk (presumably as opposed to a HD-DVD disk).
• (UHD) - a 4K BluRay disk.
• /UHD - an alias for (UHD) (but not widely used)

However, at the end of the day, a comment is just a comment and so it may or may not contain any of the above. Nor can you guarantee that what it says is accurate anyway.

[Coopervid]

Makemkv has fallen behind. Windows users can load keydb.cfg and decrypt with AnyDVD (UHD) or XReveal (BD and UHD). In both cases you load yor disc and start any of these programs and you need the most updated keydb.cfg. If you want to use Makemkv to create a mkv just start it after one of these programs has decrypted the disc. It's somehow stupid that Makemkv only uses VUKs since the UK is derived from the VUK and there's no logical reason for UKs to not work with Makemkv.

[MrPenguin]

(Nor is access to KEYDB.cfg currently geo-blocked. Just sayin'... )

[Fionnbarr]

Hi,

I sent an email with a dump a 4 days ago and unsure of the process, should I email in a certain format? Will I get a reply with the Key? or is it stored online? I am using a

Manufacturer: HL-DT-ST
Product: BD-RE BU40N
Revision: 1.03
Firmware date: 2118-10-24 19:34
Bus encryption flags: 17
Highest AACS version: 76


LibreDrive Information
Status: Enabled
Drive platform: MT1959
Firmware type: Patched (microcode access re-enabled)
Firmware version: 1.03
DVD all regions: Yes
BD raw data read: Yes
BD raw metadata read: Yes
Unrestricted read speed: Yes

Seemingly can decrypt all Bluray disks I own but not the UHD disks I own. Am I doing something wrong or just need to wait on a key from the email?

Kind regards

[dcoke22]

I sent an email with a dump a 4 days ago and unsure of the process, should I email in a certain format? Will I get a reply with the Key? or is it stored online?

You just need to have the dump as an attachment in the email. You will not receive a response. You just need to try to rip your disc again in a few days. When a hashed key is available for your disc, MakeMKV will download it when you try to rip it.

Also: Attached TGZ files will be removed

Do you see something to the effect of "Automatic HK downloading is disabled or failed" in your MakeMKV log? If so, you'll need to fix that because something is blocking MakeMKV from downloading the necessary hashed keys. See the first post in this thread for details.

If everything is working properly but you can't wait for a hashed key to be made, the KEYDB.cfg (an alternative way to decrypt 4K UHDs) might have the necessary key. Again the first post in this thread or many other posts on this forum have links to where to download it and instructions for where to put it in your MakeMKV installation.

[MartyMcNuts]

Hi,

I sent an email with a dump a 4 days ago and unsure of the process, should I email in a certain format? Will I get a reply with the Key? or is it stored online? I am using a

Manufacturer: HL-DT-ST
Product: BD-RE BU40N
Revision: 1.03
Firmware date: 2118-10-24 19:34
Bus encryption flags: 17
Highest AACS version: 76


LibreDrive Information
Status: Enabled
Drive platform: MT1959
Firmware type: Patched (microcode access re-enabled)
Firmware version: 1.03
DVD all regions: Yes
BD raw data read: Yes
BD raw metadata read: Yes
Unrestricted read speed: Yes

Seemingly can decrypt all Bluray disks I own but not the UHD disks I own. Am I doing something wrong or just need to wait on a key from the email?

Kind regards

MakeMKV should automatically download the updated keys when they are added. After you email in a tgz dump file, it usually takes around 2 weeks for a key to be added.

[Fionnbarr]

Will every UHD disk have a unique encryption key usually or will I have to email you every tgz dumpof every disk? Very new to this so sorry for the noob tier questions.
Also a user private messaged me to expediate the process and email him the dump how reliable is this?

And for in future do you prefer an email structure?

Kind regards and thanks in advance

[d00zah]

Will every UHD disk have a unique encryption key usually or will I have to email you every tgz dumpof every disk? Very new to this so sorry for the noob tier questions.
Also a user private messaged me to expediate the process and email him the dump how reliable is this?

And for in future do you prefer an email structure?

Kind regards and thanks in advance

From the UHD FAQ:

I see a movie discussed in the forum, but MakeMKV won't open my disc.
There are multiple versions of UHDs for each movie (countries, retailers, rentals) and there may be multiple keys for even the same version, so it's possible that your particular disc isn't decrypted yet. Submit the dump file!

[Fionnbarr]

Hi,

So I have waited >2 weeks now and still unable to decrypt the disk I sent in. I also tried placing a KEYDB.cfg file in my .MakeMKV data directory and still no dice unfortunately. Of course "Enable Internet Access" is ticked as well. I am wondering am I doing anything else wrong. I have a Archgon slim external drive (LG BU40N) with this info here

Current profile: BD-ROM
Manufacturer: HL-DT-ST
Product: BD-RE BU40N
Revision: 1.03
Serial number: redacted
Firmware date: 2118-10-24 19:34
Bus encryption flags: 17
Highest AACS version: 76

LibreDrive Information
Status: Enabled
Drive platform: MT1959
Firmware type: Patched (microcode access re-enabled)
Firmware version: 1.03
DVD all regions: Yes
BD raw data read: Yes
BD raw metadata read: Yes
Unrestricted read speed: Yes


A list of the errors reading like:
.
.
.
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT PRESENT' occurred while issuing SCSI command A40..002000800 to device
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT PRESENT' occurred while issuing SCSI command A30..0020..03F to device '
.
.
.
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device '
Can't read AACS VID from disc - most likely current AACS host certificate is revoked by your drive
Saved AACS dump file as ...
LibreDrive compatible drive is required to open this disc - video can't be decrypted.
Failed to open disc


Any further advice would be greatly appreciated, or any other info I can provide to help, I can do so.

Thanks in advance.

[MrPenguin]

LibreDrive compatible drive is required to open this disc - video can't be decrypted.

This is saying that MakeMKV has not managed to enable LibreDrive, which means that the TGZ dump file will not contain the important information that MakeMKV needs to derive your keys.

It also means that MakeMKV has not managed to disable bus encryption for your disk either, so MakeMKV cannot successfully decrypt your disk even if it can read the disk's Volume Unique Key (VUK) from KEYDB.cfg.

[mihawk90]

I'm sorry I have to ask this but I read a couple topics and am still unclear...
So I have a UHD friendly that is supposedly able to rip the discs, it's an ASUS BW-16D1HT.

In the FAQ it says:

Which drives work with UHDs?
You need a BDXL-compatible LibreDrive drive, which includes most "official" and all "friendly" UHD drives. Check out the UHD drives subforum and the UHD Drives Guide thread. (Originally, the drive with the most reported success was the ASUS BW-16D1HT.)

and

How does MakeMKV work with UHDs?
MakeMKV uses Hashed Keys. Originally supplied via a download, MakeMKV now updates automatically. Go to View / Preferences / General and ensure that "Enable Internet access" is checked.

Which sounds to me like nothing more is required. In MakeMKV's Info section it says

Code: Select all

LibreDrive Information
Status: Possible (with patched firmware)

But I'm not entirely sure whether that still needs to be done manually or what.

From what I can tell LibreDrive is supposed to "just work" automagically, but one of the linked threads at least sounds like I still need to flash manually.

I'm asking because when I insert a UHD BD (tried Inception and Tenet), the status just goes from "Disc is being loaded" to "No disc inserted" which sounds like it can't read the disc (and in fact makemkvcon shows "Failed to open disc"). If it's an issue with the firmware it would be nice if MakeMKV said as much

But even if the firmware were patched, I'm still not sure how LibreDrive works. Do I need to do anything for that manually or is that handled automatically when a patched firmware is detected?

I seem to remember that when UHD ripping was first introduced years ago, it didn't require flashing firmwares or anything (but it was more complicated with getting the keys manually and whatnot). So I guess that has changed?

[MartyMcNuts]

I'm sorry I have to ask this but I read a couple topics and am still unclear...
So I have a UHD friendly that is supposedly able to rip the discs, it's an ASUS BW-16D1HT.

In the FAQ it says:

Which drives work with UHDs?
You need a BDXL-compatible LibreDrive drive, which includes most "official" and all "friendly" UHD drives. Check out the UHD drives subforum and the UHD Drives Guide thread. (Originally, the drive with the most reported success was the ASUS BW-16D1HT.)

and

How does MakeMKV work with UHDs?
MakeMKV uses Hashed Keys. Originally supplied via a download, MakeMKV now updates automatically. Go to View / Preferences / General and ensure that "Enable Internet access" is checked.

Which sounds to me like nothing more is required. In MakeMKV's Info section it says

Code: Select all

LibreDrive Information
Status: Possible (with patched firmware)

But I'm not entirely sure whether that still needs to be done manually or what.

From what I can tell LibreDrive is supposed to "just work" automagically, but one of the linked threads at least sounds like I still need to flash manually.

I'm asking because when I insert a UHD BD (tried Inception and Tenet), the status just goes from "Disc is being loaded" to "No disc inserted" which sounds like it can't read the disc (and in fact makemkvcon shows "Failed to open disc"). If it's an issue with the firmware it would be nice if MakeMKV said as much

But even if the firmware were patched, I'm still not sure how LibreDrive works. Do I need to do anything for that manually or is that handled automatically when a patched firmware is detected?

I seem to remember that when UHD ripping was first introduced years ago, it didn't require flashing firmwares or anything (but it was more complicated with getting the keys manually and whatnot). So I guess that has changed?

Your drive needs to be flashed to be able to read UHD discs. Once flashed to a UHD capable firmware, Libredrive will be enabled. Flashing the drive with a UHD compatible firmware has always been required (except for a couple of drives that actually came with a UHD compatible firmware back in 2017). Nothing has changed.

[SamuriHL]

KeyDB Helper (Windows Only)

https://www.mediafire.com/file_premium/ ... .1.7z/file

* Extract it to a folder
* Run it...it will download a copy of FindVUK and configure it

The following functions are available:

* Synchronize - Syncs the keydb.cfg file using FindVUK and then copies it to the MakeMKV data directory
* Validate - Validates your disc in the KeyDB file. This is a VERY good thing to be doing with all your discs!! It helps to maintain the integrity of the KeyDB.
* Disc Info - Shows you the information for your disc including the disc ID. If your KeyDB.cfg file contains device keys and/or processing keys, it COULD, in theory, maybe use those to ADD entries to the KeyDB. You know, for those pesky MKB v82 blu-rays everyone is loving. Like, if you visited this page:

Code: Select all

https://forum.doom9.org/showthread.php?p=1990091#post1990091

And you happened to copy the line that ends with:

Code: Select all

MKBv82-...

Into your own local keydb.cfg file that's likely located in your %appdata%\aacs diirectory on Windows in the section that has this header

Code: Select all

; #FV#### DEVICE KEY SECTION #####

Well, then if you run disc info on a new blu-ray, who knows what could happen. All I can say is you maybe might want to try that and see.

Additionally, once in a great while when the luck of the stars work in your favor, SOMETIMES on rare occasions this disc info process might help you find a VUK for a UHD that you're waiting for. To be clear, this code contains ZERO keys and there are NO public AACS 2.x processing keys...but sometimes you get lucky with other entries that could be in the KeyDB just waiting to be taken advantage of at times.

NOTE: This will not work on certain Pioneer drives. The VID needs to be able to be read correctly for it to work.

* KeyDB Search - Search for a disc ID in the KeyDB to see if there's an entry

If you see [MakeMKV SUPPORTED]: FALSE it means that the KeyDB entry does not contain a VUK. You should post a dump or a link to a dump for your disc to see if someone can add a full entry to the KeyDB for your disc

That's all it does. But should make things easier for those who use the KeyDB in concert with MakeMKV.

NOTE: This will require .NET 8 Framework runtime be installed. You can find the latest here:

https://dotnet.microsoft.com/en-us/download/dotnet/8.0

Get the Windows X64 installer.

============
1.0.0.1 Added notification if title supported by MakeMKV
1.0.0.2 Fixed path not found exception when attempting to create an empty keydb.cfg file on startup
1.0.1.0 Enhanced Disc Info functionality; FindVUK Validate disc functionality added
1.0.1.1 Log inflation bug...accidentally left debug logging statement in causing log to grow exponentially...oops

[neo305]

Awesome thank you

[garnuts]

Thanks for this tool SamuriHL!

The first time I ran it I got an error, something like:

"Could not find path: Users/Computer Name/AppData/Roaming/aacs/key.db"

I had no 'aacs' folder in Roaming, so I created one and copied the last key.db file I had into the new aacs folder. Re-ran KeyDB Helper and it worked!

Posting this for anyone else who runs into the same error.