# HLS AES-128 encryption does not work on transcoded streams

**URL:** https://community.wowza.com/t/hls-aes-128-encryption-does-not-work-on-transcoded-streams/50151
**Category:** Wowza Streaming Engine
**Created:** [November 17, 2017, 4:28pm UTC](https://community.wowza.com/t/hls-aes-128-encryption-does-not-work-on-transcoded-streams/50151 "2017-11-17T16:28:34Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![edaich](https://avatars.discourse-cdn.com/v4/letter/e/f475e1/32.png) [@edaich](https://community.wowza.com/u/edaich)
#### Post date: [November 17, 2017, 4:28pm UTC](https://community.wowza.com/t/hls-aes-128-encryption-does-not-work-on-transcoded-streams/50151/1 "2017-11-17T16:28:34Z")

</div>

I have AES-128 encryption working for all streams except real-time transcoded streams. I have a .key file of the transcoded stream name in the keys directory and it doesn’t seem to take.

In this case, the transcoded stream has a \_aac suffix attached to it. When I access the playlist.m3u8 file for that transcoded stream, it’s never being encrypted.

Is this a known limitation?

---

<div class="post-metadata">

### Author: ![edaich](https://avatars.discourse-cdn.com/v4/letter/e/f475e1/32.png) [@edaich](https://community.wowza.com/u/edaich)
#### Post date: [November 17, 2017, 5:44pm UTC](https://community.wowza.com/t/hls-aes-128-encryption-does-not-work-on-transcoded-streams/50151/2 "2017-11-17T17:44:12Z")

</div>

I’ve noticed that I have to restart the wowza service in order for the key file for the transcoded stream to be recognized and for the stream to become encrypted. Is this a bug?

---

<div class="post-metadata">

### Author: ![edaich](https://avatars.discourse-cdn.com/v4/letter/e/f475e1/32.png) [@edaich](https://community.wowza.com/u/edaich)
#### Post date: [November 17, 2017, 3:19pm UTC](https://community.wowza.com/t/hls-aes-128-encryption-does-not-work-on-transcoded-streams/50151/3 "2017-11-17T15:19:12Z")

</div>

Also, what is the “st” directory in the /keys directory? There is a .key file in there that gets updated on service restart.
