# Secure Token on Origin & Edge Servers

**URL:** <https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068>\
**Category:** Wowza Streaming Engine\
**Created:** [June 29, 2014, 5:58am UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068 "2014-06-29T05:58:50Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![kenji\_magto](https://avatars.discourse-cdn.com/v4/letter/k/e47774/32.png) [@kenji\_magto](https://community.wowza.com/u/kenji_magto)\
**Post date:** [June 29, 2014, 5:58am UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068/1 "2014-06-29T05:58:50Z")

</div>

Hello Wowza, I am planning to implement secure token on both edge (CDN) and origin, how can i do that? 😃 , i have my JWPLAYER token ready my problem is when i tried to put a token on Wowza, my players says cannot connect to the server ☹ hope you guys can help me with this 🙂

Thanks,

---

<div class="post-metadata">

**Author:** ![Zoran](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/zoran/32/385_2.png) [@Zoran](https://community.wowza.com/u/Zoran)\
**Post date:** [June 29, 2014, 10:50pm UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068/2 "2014-06-29T22:50:30Z")

</div>

Hi,

Please take a look at the “[How to add SecureToken protection to JW Player](https://www.wowza.com/docs/how-to-add-securetoken-protection-to-jw-player)” forum article. You can also find instructions how to configure your Wowza server as well. [Here](https://www.wowza.com/docs/how-to-add-securetoken-protection-to-jw-player#server_config) is the direct link.

Zoran

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [June 30, 2014, 12:34am UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068/3 "2014-06-30T00:34:35Z")

</div>

Also take a look at the [How to Secure the Origin in this guide](https://www.wowza.com/docs/how-to-configure-a-live-stream-repeater)

But note that you need control of the edge server to implement SecureToken between an edge and origin, and between client and edge.

Richard

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [July 3, 2014, 2:18pm UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068/4 "2014-07-03T14:18:40Z")

</div>

You could disable playback from the push application. Make the Application.xml /Client /Access /StreamReadAccess empty (take out the “\*”)

```auto
<StreamReadAccess></StreamReadAccess>

```

And set /RTP /Authentication /PlayMethod “none”

```auto
<PlayMethod>none</PlayMethod>

```

And make LiveStreamPacketizers empty

```auto
<LiveStreamPacketizers></LiveStreamPacketizers>

```

This will disable all playback, but push will still work.

Adaptive bitrate is covered in [the Push Guide](https://www.wowza.com/docs/how-to-push-streams-to-cdns-and-other-services-push-publishing%28Push-Publishing%29). You will set the adaptiveStreaming:true flag the push rules in the PushPublishMap.txt file

```auto
myStream_480p={profile:"rtmp", streamName:"myStream_480p", userName:"myUser", password:"myPassword", adaptiveStreaming:true}
myStream_360p={profile:"rtmp", streamName:"myStream_360p", userName:"myUser", password:"myPassword", adaptiveStreaming:true}
myStream_720p={profile:"rtmp", streamName:"myStream_720p", userName:"myUser", password:"myPassword", adaptiveStreaming:true}

```

Richard

---

<div class="post-metadata">

**Author:** ![Jason\_Hilton](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/jason_hilton/32/437_2.png) [@Jason\_Hilton](https://community.wowza.com/u/Jason_Hilton)\
**Post date:** [July 1, 2014, 7:03am UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068/5 "2014-07-01T07:03:38Z")

</div>

Hi,

Yes, I recommend using the same version of Wowza on the origin and edges if possible.

Do you see anything in the logs which would indicate an issue?

If you’re still unable to get this working, please open a ticket by sending an email to support@wowza.com.

Please include a detailed description of the setup and issue, a zipped copy of the following directories and a link to this thread for reference.

[Wowza-Install]/conf/

[Wowza-Install]/logs/

[Wowza-Install]/transcoder/

[Wowza-Install]/manager/logs/

Please do make sure you provide logs which show Wowza server starting.

If you are not sure how to get this information please see the following tutorial.

[How to create a compressed zip file in Windows, OS X, and Linux](https://www.wowza.com/docs/how-to-create-a-compressed-zip-file-in-windows-os-x-and-linux)

Regards,

Jason

---

<div class="post-metadata">

**Author:** ![Jason\_Hilton](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/jason_hilton/32/437_2.png) [@Jason\_Hilton](https://community.wowza.com/u/Jason_Hilton)\
**Post date:** [July 30, 2014, 10:48am UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068/6 "2014-07-30T10:48:52Z")

</div>

> And set /RTP /Authentication /PlayMethod “none”
> 
> ```auto
> <PlayMethod>none</PlayMethod>
> 
> ```
> 
> Correction\*
> 
> To stop RTP/RTSP playback set /RTP /Authentication /PlayMethod “block”
> 
> ```auto
> <PlayMethod>block</PlayMethod>
> 
> ```
> 
> Regards,
> 
> Jason

---

<div class="post-metadata">

**Author:** ![kenji\_magto](https://avatars.discourse-cdn.com/v4/letter/k/e47774/32.png) [@kenji\_magto](https://community.wowza.com/u/kenji_magto)\
**Post date:** [June 30, 2014, 6:32pm UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068/7 "2014-06-30T18:32:06Z")

</div>

Hello thanks for your reply guys :), I have no complete control on CDN but they have the settings there where i can put the secure token , I put secure token on both origin and edge server using same token but still not working,btw, is it important to match the version of origin and edge server? 🙂 right now i dont know whats the version of the cdn but were using “Wowza Streaming Engine 4 Monthly Edition 4.0.4 build11775” on our origin server 🙂

Thanks,

---

<div class="post-metadata">

**Author:** ![kenji\_magto](https://avatars.discourse-cdn.com/v4/letter/k/e47774/32.png) [@kenji\_magto](https://community.wowza.com/u/kenji_magto)\
**Post date:** [June 30, 2014, 10:56pm UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068/8 "2014-06-30T22:56:55Z")

</div>

BTW, they used Wowza version 3.6.3 for Edge CDN and 4.0.4 on origin 🙂

---

<div class="post-metadata">

**Author:** ![kenji\_magto](https://avatars.discourse-cdn.com/v4/letter/k/e47774/32.png) [@kenji\_magto](https://community.wowza.com/u/kenji_magto)\
**Post date:** [July 2, 2014, 9:21pm UTC](https://community.wowza.com/t/secure-token-on-origin-edge-servers/42068/9 "2014-07-02T21:21:39Z")

</div>

Hello we figured that the problem is on CDN, here is what they said:

“To achieve that, our CDN streaming servers need to authenticate the secure token at the origin wowza. However, with our current CDN implementation (source/origin needs to be public accessible), our CDN streaming servers would not able to restream from your wowza origin if secure token is enabled.”

so i have to find another way to secure (avoid playback) the origin,

Im not sure if this is good alternative on securing the origin server : [https://www.wowza.com/docs/how-to-push-streams-to-cdns-and-other-services-push-publishing](https://www.wowza.com/docs/how-to-push-streams-to-cdns-and-other-services-push-publishing) .

Its clear to me on how to do this but my problem is how to do it with dynamic stream id, on **PushPublishMap.txt** the example gives this config:

myStream={profile:“rtmp”, streamName:“myStream”, host:“[www.mydestination.com](http://www.mydestination.com)”}

what i want to achieve is something like this:

[any dynamic strean name]={profile:“rtmp”, streamName:"[any dynamic strean name]", host:“[www.mydestination.com](http://www.mydestination.com)”}

is that posible?

Thanks,
