# How to use "Secure Token Target"?

**URL:** <https://community.wowza.com/t/how-to-use-secure-token-target/50968>\
**Category:** Wowza Streaming Engine\
**Tags:** security\
**Created:** [March 19, 2018, 4:02pm UTC](https://community.wowza.com/t/how-to-use-secure-token-target/50968 "2018-03-19T16:02:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Cecil\_Law](https://avatars.discourse-cdn.com/v4/letter/c/85e7bf/32.png) [@Cecil\_Law](https://community.wowza.com/u/Cecil_Law)\
**Post date:** [March 19, 2018, 4:02pm UTC](https://community.wowza.com/t/how-to-use-secure-token-target/50968/1 "2018-03-19T16:02:03Z")

</div>

Hi All,

I want to add Secure Token to protect my video, and found the solution. ([http://community.wowza.com/community/questions/3575/article-how-to-protect-streaming-using-securetoken.html](http://community.wowza.com/community/questions/3575/article-how-to-protect-streaming-using-securetoken.html))

Now I can play back the video, yeah!

After that I found a new key word “Secure Token target” in other page

([https://www.wowza.com/docs/how-to-configure-security-using-wowza-streaming-engine-manager#secure\_connection](https://www.wowza.com/docs/how-to-configure-security-using-wowza-streaming-engine-manager#secure_connection))

I added this in my Application.xml

securitySecureTokenTarget\</Name

play,create

String

After restart application, i can’t playback anymore…

from log i found this:

2018-03-19 11:11:04 HKT comment server INFO 200 - [live/_definst_]SecureTokenDef:Request from client IP address, 192.168.9.254, doesn’t match base URL, live/test1 _defaultVHost_ live _definst_ 256685.69 - - - - - - - - - - - - - - - - - - - - - - - - -

2018-03-19 11:11:04 HKT comment session INFO 403 1432081748 ModuleCoreSecurity#SecureTokenStreamActions.onPlay[live/_definst_/test1]: Secure Token Failed. rejectStreamPlay: clientId:1432081748 _defaultVHost_ live _definst_ 0.195 [any] 1935 rtmp://192.168.9.204/live 192.168.9.254 rtmp [http://192.168.9.204:8088/enginemanager/applications/test/live/FlashRTMPPlayer/live.swf](http://192.168.9.204:8088/enginemanager/applications/test/live/FlashRTMPPlayer/live.swf) WIN 29,0,0,113 1432081748 3715 3455-- - - - - - - - - - - - rtmp://192.168.9.204/live -

when remove secureTokenTarget, everything is ok again.

I want to know what is Secure Token Target? How to use?

or is it necessary? or just set secure token is secure?

Thx

---

<div class="post-metadata">

**Author:** ![AMAN\_LOS](https://avatars.discourse-cdn.com/v4/letter/a/a3d4f5/32.png) [@AMAN\_LOS](https://community.wowza.com/u/AMAN_LOS)\
**Post date:** [April 10, 2018, 9:40am UTC](https://community.wowza.com/t/how-to-use-secure-token-target/50968/2 "2018-04-10T09:40:32Z")

</div>

Tag that outputs SecureToken for DSRF countermeasure.It generates a hidden tag for the form tag.If you set any attribute for this tag, you will be used to seed to generate a token attribute keys and values.And do check that the run-time verification of the token that was used to seed any attribute keys and values, including the seed has not changed from the request parameters.