Copy Protection Key Exchange Failure

[cmbailey4365]

I get the following errors when trying to access a disc for the movie Tess (disc released on 2014-02-25) using MakeMKV:

Code: Select all

MakeMKV v1.8.10 linux(x64-release) started
Using direct disc access mode
Evaluation version, 25 day(s) out of 30 remaining
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..04FD6D59011CDA2446DABFC3F4753A0BCA6 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..02F9781629E49B9789730D0878CC662889B to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..00A43A1090128AD2DE3ADC5EB755004346C to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..020BD6F8DE45CA14BB50546F292CB7A79A7 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0969FBE3607218C520327CC7C52BEC0E335 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0547A09FFA92342AAC16C36A9646A9540F6 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..01058016FFACAEE564CF991B852F9BC5B99 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0B868D821072AE04B765F5B2E7943B5F758 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..04F65E8B719F84B8FF1A9C16D38476FDDC1 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0CE7798AAD5CEE6D27C73F826619DEC1F3A to device 'SG:dev_11:1'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:1'
Can't read AACS VID from disc - most likely current AACS host certificate is revoked by your drive
Highest AACS version is v43 , MKB saved as /home/[ . . . ]/.MakeMKV/MKB_v43_TESS.tgz
The volume key is unknown for this disc - video can't be decrypted
Failed to open disc

I am new to the process of decrypting Blu-ray discs. My source (Blu-ray disc drive) is labelled as "BD-RE Optiarc BD RW BD-5730S 1.5C" in MakeMKV. I tried to attach MKB_v43_TESS.tgz to this post, but I received the following error message: "Sorry, the board attachment quota has been reached." I will appreciate any help with this problem.

[Woodstock]

Generally speaking, sending TGZ files is best done to support@makemkv.com directly, or posting to a site where you can send a link to that email address so that Mike can pull them down.

Do the errors occur with JUST this disk, or now "all" BD disks?

[cmbailey4365]

Thank you for your reply. I do get the same error messages for all Blu-ray discs, even a disc (Eyes Wide Shut) that I was previously able to decrypt successfully. Also, when I did successfully decrypt Eyes Wide Shut earlier, I was not yet using MakeMKV (just libaacs for decryption). Thus far, I have not actually been able to decrypt a Blu-ray disc with MakeMKV. If I am able to decrypt discs during my trial, I plan to buy a full license.

[shonen]

I have this same error on Centos 6.4, I'm registered in windows but can't use it in Linux. I have an external BD-R and it doesn't seem to matter if I restart or move the plugs around for the usb-3 dive.

[Woodstock]

The symptoms say the drives in question have been zapped by encountering a newer version of AACS than MakeMKV can accommodate. Once that happens, the drive will refuse to decode any BD disk until MakeMKV is updated to a different access key. Versions 1.8.7 and later have a key that works against AACS v46 and earlier.

There have been previous reports posted here of disks failing to read like this under Linux, but which were readable in the same version under Windows. The difference was, apparently, that the Linux drivers weren't allowing MakeMKV to send the key to the drive. One other possible explanation is that a file from an older version of MakeMKV was compiled into the current version, so it didn't have the newer key to send.

If you can boot the computer under Windows, or run a Virtual Machine with Windows on it, try the Windows version of MakeMKV to see if it will talk to the drive.

In the case of a USB drive, plugging it into a Windows machine should be enough to run the test. If 1.8.10 cannot access the disk under Windows, it should at least gather the information about the AACS version on the problem disk, so that Mike can work on it.

[shonen]

So is the libaacs that is newer the one linux is using, or the Blu-ray disk? If it's linux, then is this something that can be fixed by rolling back to an older version of libaacs. also, where are these "keys" stored? Thanks!

[Woodstock]

Mike will have to confirm, but I don't think MakeMKV uses libaacs - it has its own equivalent functionality.

The problem is that AACS modifies the drive firmware to revoke keys. When a new version comes out, if the key that MakeMKV is currently using is in the revocation list, the drive will refuse to access any BDs, until a new version of MakeMKV with a different key is released. The same thing happens with libaacs, most likely; if the key it uses is revoked, you're stuck until an update occurs.

1.8.7 and later of MakeMKV should work with any drive that has only been exposed to AACS v46 or older.

If you can test using the Windows version, that removes libaacs from potentially being a problem.

[shonen]

I was following you right up til the end, when "that removes libaacs from potentially being a problem". How does using windows remove libaacs from being a problem? The disk I'm trying to read, and the drive I'm using in Linux (centos 6x), were already successfully used in windows, but I'm not sure what the versions were of makemkv.

So you think there is a firmware issue with the Blu-ray drive and that it has to do with a key that is stored in that firmware that is now on a blacklist, if I understand you correctly. The only thing is that I've read on this forum others that had this problem and it solved with a reboot.. I have no idea why, but rebooting doesn't work for me.

1) Can you flash your firmware on the Blu-ray drive to test this theory and 2) maybe compiling libaacs from source would generate newer keys?? I don't fully understand what libaacs provides.

[Woodstock]

Windows itself has nothing like libaacs, so running MakeMKV under Windows, you're guaranteed to not have libaacs involved in the rip. It shouldn't be under Linux, either, but... it's one other possibility.

I cannot answer your question about re-flashing the BD drive. As I understand the situation, the revocation table is in an area that is supposed to be protected from such mischief, but anything is possible.

[shonen]

Ah, I see; I've already ripped the same movie with the same drive (in the past) in Windows 8, that I'm trying to rip now in Centos 6 with no luck. I guess I'll try to compile libaccs from source and see if I can get a newer version going.

[shonen]

So I compiled libaacs from the git repository, uninstalled yum version, installed newer version, re-compiled makemkv, re-installed, restarted.. same problem:

MakeMKV v1.8.10 linux(x64-release) started
Using direct disc access mode
Evaluation version, 27 day(s) out of 30 remaining
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0FFA41FC9E5856AEA223665A887510B3C66 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..072B3CE8F6A8F2209F0FF220F1E63FE37C8 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..09144BB0C708490C8B0940F6710F552101D to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..071CA9EF41185F4921E44F09AF2F89D37BD to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0B3157462FF92459E1F5364C7C162D119C0 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0E9860E982466F0B808E815012588F406CA to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..05217BA4DD4C2D1CF2AC390742C1BA9DE15 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0C07260BCB5E762B9B99FF00E18F15B9BE0 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..05DFD81141C49FD5264977ADC4D7496B6D3 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - AUTHENTICATION FAILURE' occurred while issuing SCSI command A30..00200740100720..0730E760414FA387399D353436B32A589B9 to device 'SG:dev_11:0'
Error 'Scsi error - ILLEGAL REQUEST:COPY PROTECTION KEY EXCHANGE FAILURE - KEY NOT ESTABLISHED' occurred while issuing SCSI command AD010..080002400 to device 'SG:dev_11:0'
Can't read AACS VID from disc - most likely current AACS host certificate is revoked by your drive
Highest AACS version is v25 , MKB saved as /home/maven/.MakeMKV/MKB_v25_THE_CONFORMIST.tgz
The volume key is unknown for this disc - video can't be decrypted
Failed to open disc

My version of aacs listed here is v25?

[cmbailey4365]

It appears that the problem is related to how MakeMKV sends decryption keys to my drive in Ubuntu 14.04 (and 13.10). Maybe that is what "key exchange failure" means. I have described the things I tried and given my conclusions below, in detail.

For those who don't know, libaacs requires the user to download a configuration file separately, which provides keys for decrypting different versions of AACS. The newest configuration file that I could find only provides keys to decrypt AACS versions equal to or less than 25. The fact that libaacs worked for me until I used a disc using an AACS version greater than 25 suggests that it is possible for software under Linux to successfully send decryption keys to my drive (provided I have sufficiently new keys), but that there is something specific to the way that MakeMKV sends decryption keys that does not work with my drive (regardless of the AACS key version). That I have never been able to decrypt a Blu-ray disc using MakeMKV under Linux suggests the same thing: it is how MakeMKV communicates with my drive in Ubuntu, not the newness of AACS on my discs, that is causing a problem.

The ability of MakeMKV to decrypt the AACS versions on my discs should not be a problem, since the latest version contained on any of my discs is 43 (and versions equal to or less than 46 are supported).

I do not own or use Windows, so using it is not a permanent solution for me. I was able to borrow a computer from someone for testing. MakeMKV successfully decrypted my discs, including Tess (the one mentioned in my error message), while using the same external drive that I have been using in Ubuntu.

I just recently did a full erase and install of Ubuntu, when Ubuntu 14.04 was released, so there are not any issues with files from older versions of MakeMKV being compiled into the version I am currently using.

I do not think there is any interference from libaacs that is causing MakeMKV to fail. I did previously have libaacs installed. I have since completely removed it, but my problem persists.

[gellis]

Did you get a solution to this?

I appear to be having the same issue. The drive works with windows, however on linux I get KEY Exchange failures.

[cmbailey4365]

I was not able to solve this problem.

[cmbailey4365]

gelliss, I decided to look into this again and found the same information that you did.

For others viewing this topic, the same problem I am having has been discussed previously in relation to Fedora at http://www.makemkv.com/forum2/viewtopic.php?f=3&t=7370. gellis reported the problem in relation to Ubuntu at http://www.makemkv.com/forum2/viewtopic.php?f=3&t=7930. As gellis did, I too tried the suggestions mentioned in the Fedora topic, without success.

The problem persists for me. I am using Ubuntu 14.04 and MakeMKV 1.8.11. I would be interested to know if the problem is specific to our systems or affects every system using an up-to-date version of Ubuntu with an up-to-date version of MakeMKV. From what I understand, it seems like this problem would affect every system using an up-to-date version of Ubuntu and thus prevent many if not most Ubuntu users from being able to use MakeMKV.