If I understand your description right, exporting the DOM certificate is the wrong task - you need to create a DKDM for Qube Master Pro, and before, you need to request the certificate from the Qube Master Pro station and create a screen with that certificate in DOM. - Carsten Am 25.01.2017 um 22:44 schrieb Tom Haines via DCPomatic: I am working with someone who is having an issue with importing certificates that were exported from DCP-o-matic into QubeMaster Pro to create a DKDM. I exported the cert through "Export DCP decryption certificate..." in the Keys tab in preferences on v2.9.0 for OS X. When they import the .pem file I exported they receive the following error: Certificate(s) validation in progress... terminating in a root certificate They believe the issue to be on my end. Any thoughts on what may be going on? [image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive Director of Digital Cinema Services 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA Office: 215-618-3874 <(215)%20618-3874> | Mobile: 484-269-8227 <(484)%20269-8227> | Skype: tom.haines41 Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter <https://twitter.com/Specticast> | Google+ <https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts> | Instagram <http://instagram.com/specticast> | Tumblr <http://specticast.tumblr.com/> _______________________________________________ DCPomatic mailing list DCPomatic(a)carlh.net http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic _______________________________________________ DCPomatic mailing list DCPomatic(a)carlh.net http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic

Am 25.01.2017 um 23:43 schrieb Tom Haines: with DOM Okay, in this case you would need to use 'Export DCP encryption chain'. And hope that Qube Master Pro accepts DOMs root certificate/chain. - Carsten _______________________________________________ DCPomatic mailing list DCPomatic(a)carlh.net http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic

Am 25.01.2017 um 23:59 schrieb Tom Haines: result from 'Export DCP decryption certificate' and that's what caused him this error. Are they the same thing, or am I missing something? Ooops. In my Preferences - Keys I have three options at the bottom of the dialog: Re_Make certificates and key Export DCP decryption certificate... Export DCP decryption chain... Ooops, it seems that button is indeed not there in 2.9... maybe upgrade to 2.10.2 or 2.10.6? 'Export Decryption certificate' will only export the leaf certificate of your DOM installation. Technically, the leaf is sufficient to create KDMs/DKDMs, but some software may require a full certificate chain, which is what the error message you posted seems to signal. Qube Master Pro may have a setting to override that behaviour and be happy with the leaf only, but I am not familiar with that software. - Carsten _______________________________________________ DCPomatic mailing list DCPomatic(a)carlh.net http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic

Am 25.01.2017 um 23:59 schrieb Tom Haines: Carl - I could probably try this myself, but, assuming Tom want's to stay with 2.9 - can the decryption certificate chain also be generated by exporting the three individual Root/Intermediate/Leaf certificates in the upper part of the decryption certificate dialog segment, and simply concatenate them into a single file?

- Carsten _______________________________________________ DCPomatic mailing list DCPomatic(a)carlh.net http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic