Book a meeting

Guide · Content

What are DCP and KDM?

The path of a film from distributor to screen in digital cinema: the package, the key and the timing.

Updated: 24 October 2026 · AHA DCS Entertainment Experts

Short answer

A DCP (Digital Cinema Package) is the digital package of a film prepared for cinema playback; it holds the picture, sound and subtitle files and is usually encrypted. A KDM (Key Delivery Message) is the digital key that unlocks that encrypted package on a specific hall's server within a specific date and time window. No DCP, no film; no valid KDM, no encrypted film.

DCP: the film's digital package

A DCP is built to the DCI specification and SMPTE standards. A typical package contains:

  • Picture: JPEG 2000-compressed frames inside MXF files
  • Sound: uncompressed multichannel PCM audio
  • Subtitles: text- or image-based subtitle files
  • Composition (CPL) and packing lists: XML files that define what plays in which order, plus validation data

Films reach cinemas on hard drives, by satellite or over the internet. After ingest, the package must be validated on the server as complete and uncorrupted; skip this and problems only show up during a show.

KDM: the key that opens the film

Most commercial releases arrive AES-encrypted. A KDM is an XML file carrying the decryption key, and it is tied to three things:

  1. A specific version of the film (CPL)
  2. A specific device: the certificate of the hall's media block (IMB); it will not work in another hall
  3. A specific time window: start and end date and time

Common screening problems

ProblemLikely causePrevention
Film won't play, “no/invalid KDM”KDM missing, expired or issued for the wrong deviceCheck KDM windows against the show schedule in advance
Film won't open on opening dayKDM start time is after the first showMatch the schedule with the KDM window
Error mid-showIncomplete or corrupted DCP ingestValidate after ingest (hash check)
Films stop opening after a projector/server changeKDMs issued for the old device certificateSend the new certificate to distributors when equipment changes

Organising content and KDM management

In multiplexes, tracking DCPs and KDMs by hand increases the risk of errors. A central content calendar, monitoring that warns before KDMs expire, and a TMS (Theatre Management System) that manages every hall from one screen reduce that risk.

Frequently asked questions

What does DCP stand for?
Digital Cinema Package: the digital package of a film, with picture, sound and subtitle files, prepared for playback on a cinema server.
What does KDM stand for?
Key Delivery Message: the digital key file that unlocks an encrypted DCP on a specific hall's media block within a specific date and time window.
Can a KDM be used in another hall?
No. A KDM is issued for a specific device certificate and will not work on another server or media block.
What should be done when a projector or server is replaced?
The new device certificate must be sent to distributors so future KDMs are issued for it; otherwise encrypted films will not open.

The next screening

Planning something for your cinema? Let's talk.

Book a meeting