[Resolved] Host key / Certificate has been revoked by your drive

Aqualung · 2025-09-10 18:18:56

Got two Blu-ray drives hooked up to my Arch laptop, though only one plays bluray discs (tried both VLC and mpv). They both play DVDs just fine, and they both rip blurays just fine using MakeMKV. The one that doesn't play blurays throws the following error:

[dad@DadsGram ~]$ mpv /run/media/dad/Downfall
[bdmv/bluray] BDMV detected. Redirecting to bluray://
mmc.c:472: Host key / Certificate (id 0xffff800001c1) has been revoked by your drive ?
[bdmv/bluray] AACS error: certificate has been revoked

For the record, here's what MakeMKV reports for both drives:
Pioneer drive (works):

Drive Information
OS device name: /dev/sr0
Current profile: BD-ROM
Manufacturer: PIONEER
Product: BD-RW BDR-XS07U
Revision: 1.01
Serial number: B****C
Firmware date: 2020-09-03
Bus encryption flags: 13
Highest AACS version: 64

LibreDrive Information
Status: Enabled
Drive platform: RS8E21
Firmware name: PIONEER BDR-BDS7
Firmware type: Original (unpatched)
Firmware version: 1.01/ID05
DVD all regions: Yes
BD raw data read: Yes
BD raw metadata read: Yes
Unrestricted read speed: Yes

HP drive (doesn't work):

Drive Information
OS device name: /dev/sr1
Current profile: BD-ROM
Manufacturer: hp
Product: BD ROM BC-5550H
Revision: 2.80
Serial number: 1****1
Bus encryption flags: 1B
Highest AACS version: 64

Interestingly, the HP drive does not(!) get listed in lsusb.

Last edited by Aqualung (2025-09-13 16:57:41)

Lone_Wolf · 2025-09-11 08:52:27

Check https://wiki.archlinux.org/title/Blu-ra … ertificate

Aqualung · 2025-09-11 14:51:07

Lone_Wolf wrote:

Check https://wiki.archlinux.org/title/Blu-ra … ertificate

Thanks, though that is a bit too cryptic for me, as it makes reference to a plethora of concepts that, I am guessing, are presumed to be previously understood. Would you care to make it a little more explicit for me? (Rest assured that I will not be holding a grudge should you decline the honor.)

Lone_Wolf · 2025-09-11 22:13:56

BD discs are encrypted to prevent against copying.
A BD player needs a vaild key/certificate pair to play a disc .

Those keys are kept secret, but are sometimes leaked and then revoked.
A list of revoked keys is present on every BD disc.

Circumventing the blockade of the drive is hard and there's no telling when your other drive will be compromised.
Note that I used when and not if .

Inserting a new BD disc is enough to get the drive blocked.

Aqualung · 2025-09-11 22:39:38

Thanks for having the patience to put up with me! See below some pointed questions.

Lone_Wolf wrote:

BD discs are encrypted to prevent against copying.
A BD player needs a vaild key/certificate pair to play a disc.

By BD player you mean the software application, right?

Those keys are kept secret, but are sometimes leaked and then revoked.
A list of revoked keys is present on every BD disc.

I take it that my HP drive has been revoked/banned/blocked, though not my Pioneer drive, right? How come they both rip BD discs using MakeMKV though? Is it only live playback that has been blocked, while ripping has not? Also, is it my drive specifically (namely this particular serial number), or all HP drives of this model (BC-5550H)? In other words, are you saying that every BD disk out there issued after a certain date has my HP drive's serial number somehow written on it?

seth · 2025-09-12 08:14:11

I take it that my HP drive has been revoked/banned/blocked, though not my Pioneer drive, right?

Seems so, yes.

Reading across https://forum.makemkv.com/forum/viewtop … 12&t=39085 it seems MakeMKV comes with its own host keys…
I frankly don't know this, but am somewhat surprised you cannot use the VUK cached by the other drive

Aqualung · 2025-09-12 23:50:08

seth wrote:

am somewhat surprised you cannot use the VUK cached by the other drive

Interestingly, there's no ~/.cache/aacs/vuk/ directory on my system. Where else could the VUKs be cached?
[Edit] Nevermind. It turns out that I had not yet played an encrypted blu-ray disc in the Pioneer drive(!). As soon as I did that, the vuk directory showed up. And yes, now the HP drive plays the encrypted DVD just fine. Thanks for the help!

Last edited by Aqualung (2025-09-13 01:30:26)

seth · 2025-09-13 06:36:28

\o/
Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.

Aqualung · 2025-09-13 16:56:55

To summarize this discussion (@seth, please confirm that this is accurate):
1. It appears that the particular blu-ray drive that was not playing blu-ray disks had been "revoked" by the blu-ray cabal (namely blu-ray disks issued after a certain date contain a list of (banned) blu-ray drive serial numbers on which the disk is not allowed to play);
2. Fortunately, the blu-ray drive that does play BDs caches the VUKs of blu-ray disks played on it, and the banned drive above is capable of using these cached VUKs in order to play the disks. [NB: this "cached VUK" mechanism does not appear to work with VLC though!)

seth · 2025-09-13 19:15:32

by the blu-ray cabal

That's a very nice way to describe them…

https://wiki.archlinux.org/title/Blu-ra … on_process
The video player (mpv, mplayer, vlc - essentially libaacs) only needs the VUK to decrypt the BD, but to get the VUK you'll need it cached, be able to download it (it's media specific, so don't bank on that) or the media key the VID where the latter can only be read by a drive w/ a valid host certificate.
Make sure to backup all the VUKs you have, the cabal hollywood dipshits can brick your other drive every time you insert a new bluray, as long as you have the VUKs, you can still play your old blurays using them despite your drive now otherwise being useless (unless you can flash the eeprom to fix t)

Wrt VLC: Do you have https://archlinux.org/packages/?name=vlc-plugin-bluray ?

Aqualung · 2025-09-13 20:45:27

seth wrote:

Wrt VLC: Do you have https://archlinux.org/packages/?name=vlc-plugin-bluray ?

I am running the flatpak VLC: do I still need the vlc-plugin-bluray package?

seth · 2025-09-13 20:47:57

Possibly not, but make sure that vlc has access to that host path… or maybe try the repo version anyway?

Aqualung · 2025-09-13 21:00:44

seth wrote:

Possibly not, but make sure that vlc has access to that host path… or maybe try the repo version anyway?

You're right, it might be a better idea to go with the pacman version. Which means that I will probably have to install the pacman version of MakeMKV as well. Say I go with the pacman version of VLC: what auxiliary packages would I need? I need to be able to play both DVDs and BDs.

seth · 2025-09-13 21:25:10

https://archlinux.org/packages/?name=vlc-plugin-bluray for sure, probably https://archlinux.org/packages/?name=vlc-plugin-ffmpeg

Aqualung · 2025-09-14 16:48:29

seth wrote:

https://archlinux.org/packages/?name=vlc-plugin-bluray for sure, probably https://archlinux.org/packages/?name=vlc-plugin-ffmpeg

Thanks. Looks like vlc-plugins-all is needed though. Anyway, I will make another post about my issues w/VLC. Hope to see you there.

Arch Linux

#1 2025-09-10 18:18:56

[Resolved] Host key / Certificate has been revoked by your drive

#2 2025-09-11 08:52:27

Re: [Resolved] Host key / Certificate has been revoked by your drive

#3 2025-09-11 14:51:07

Re: [Resolved] Host key / Certificate has been revoked by your drive

#4 2025-09-11 22:13:56

Re: [Resolved] Host key / Certificate has been revoked by your drive

#5 2025-09-11 22:39:38

Re: [Resolved] Host key / Certificate has been revoked by your drive

#6 2025-09-12 08:14:11

Re: [Resolved] Host key / Certificate has been revoked by your drive

#7 2025-09-12 23:50:08

Re: [Resolved] Host key / Certificate has been revoked by your drive

#8 2025-09-13 06:36:28

Re: [Resolved] Host key / Certificate has been revoked by your drive

#9 2025-09-13 16:56:55

Re: [Resolved] Host key / Certificate has been revoked by your drive

#10 2025-09-13 19:15:32

Re: [Resolved] Host key / Certificate has been revoked by your drive

#11 2025-09-13 20:45:27

Re: [Resolved] Host key / Certificate has been revoked by your drive

#12 2025-09-13 20:47:57

Re: [Resolved] Host key / Certificate has been revoked by your drive

#13 2025-09-13 21:00:44

Re: [Resolved] Host key / Certificate has been revoked by your drive

#14 2025-09-13 21:25:10

Re: [Resolved] Host key / Certificate has been revoked by your drive

#15 2025-09-14 16:48:29

Re: [Resolved] Host key / Certificate has been revoked by your drive

Board footer