Fixing the Dolby/Doremi Y2K24 bug and extending the certificate on a DCP2000

Update:

The deluxe CPL Y2K24 bug that affected some media blocks from Sony Chrstie, and GDC, causing them to fail in showing some Digital Cinema Packages (DCPs) after 30.12.2023 did not affect Dolby/Doremi servers, except some reports that the Dolby Atmos track was affected on some Dolby servers that had a special configuration. The DCPs that did not play on the affected servers had CPLs signed with mastering certificates that expired on 30st December 2023. The likely reason Doremi/Dolby media blocks were not impacted by this is because they check the validity of the certificate at the time when the DCP was originally signed, rather than the date it is actually played. This means that as long as the certificate was valid at the time of signing, Doremi/Dolby media blocks will still display the DCP correctly, regardless of the current date. Others affected servers/media blocks are issued new VF DCP and KDM by DeLuxe for the affected DCPs. These are signed with a new mastering certificate that expires in a long time and this will let the cinemas play the DCPs. Many older DCPs was signed with these certificates so reruns of older films will need new VF DCPs to run on the affected media blocks .


This is a step by step guide to update the DCP2000/DCP-2K4 media block to:

  • Software 2.8.52
  • firmware 21.5b
  • Security manager 2.2.1-0
  • hot fix
  • New certificates that end in Jan 14 2038.

The software updates and certificate can be obtained through your cinema service provider.

What is the Dolby/Doremi Y2K24 Bug


The Y2k24 Bug is a bug in the Security Manager (SM) where the SM will no longer trust the secure Real-Time Clock (RTC) beyond December 31, 2023. But you can update the Security manager after 1.1.2024.

The offical Dolby/Doremi Y2K24 Security Manager (SM) RTC Issue webpage says these servers have the bug and need these SM versions to play DCPs after 1.1.2024:

  • DCP2000/DCP-2K4 w/ Dolphin 1.2 SM version 2.2.1
  • ShowVault / IMB SM version 5.2.1
  • IMS1000 SM version 6.2.1
  • IMS2000 SM version 6.2.1

These do not need to be updated:

  • DSS
  • IMS3000

The webpage also have instructions to update using the web interface, I am using the legacy QT interface.

Updating certificates before nov 2025

The certificates for the DCP-2000, DCP-2K4, Doremi IMB, IMS1000, and IMS2000 media blocks will expire in November 2025. To keep using these servers, you need to update their certificates before November 25, 2025. If you don’t update them on time, the media blocks will stop working permanently

Read more on the Dolby/Doremi Certificate Extension for servers webpage.

The Dolby step by step guide to fix Y2K24 bug and update certificate

The Dolby step by step guide to update DCP2000 using the QT legacy interface also show how to update software, security manager and certificates and has some important warnings :

  • For DCP2000 with Dolphin 1.0: If you want to export SMPTE audit logs, don’t upgrade beyond version 2.8.20. Dolphin 1.0 doesn’t need a Security Manager software upgrade because it doesn’t have a Security Manager. Just installing the certificate extension packages is enough.
  • Don’t update the media block certificates on ShowVault/IMB-SA if you’re using Sony SRX-R320 projectors. Only upgrade the Software and Security Manager and not the certificates.

The Dolbv current version webpage on DCP2000 also have more info on how to upgrade software versions step by step,
2.2.x > 2.4.4, > 2.6.4 > 2.8.x .
2.4.x > 2.6.4 > 2.8.x
It also says that if you use non-DCI projector you need to be at firmware 21.2k .


Step by step guide to fix Y2K24 bug and update certificate

Check the software, firmware and security manager version on the DCP2000

Run Diagnostic tool to see which versions the DCP2000/DCP-2K4 runs

This DCP2000 runs Software 2.8.30-0 and SM version 2.1.107-0, so i can upgrade it directly to 2.8.52-0. Firmware is already 21.5b.

Screenshot of diagnostic tool showing old versions nr

After the upgrade it runs 2.8.52-0 and SM 2.2.1-0 and the certificate end in 2038

Screenshot of diagnostic tool showing new versions nr

Find the serial in the Diagnostic tool

Run Diagnostic tool to find the serial nr

Screenshot of diagnostic tool showing serial nr

Download upgrade keys

Download the upgrade keys for the DCP2000 serial nr here:
http://www.dolbycustomer.com/cinema/UpgradeKeys

There you will get two upgrade keys for your serial nr:

dolphin_21.05b-c_XXXXXX.drm.zip (if you need to upgrade firmware)

sbc405-2.2.1_XXXXXX.drm.zip

Copy the files to a thumb drive

Copy the upgrade keys to a fat32/ntfs/ext2 thumbdrive or hard drive with the other software you got from cinema service provider

Screenshot of files on thumbdrive

Check notifications after each reboot

Important: Check the notifications after each reboot/update to see if each update is successful.

Screenshot of notification of successfull update

Upgrade to Software 2.8.52

Insert thumb drive, the ingest manager will open automatically
(to open it manually: Meny – Doremi apps – ingest manager)

Choose

Dcp2000_install-2.8.52-0.pkg

Click ingest

Screenshot of ingest manager choosing  Dcp2000_install-2.8.52-0.pkg

You will get an message that says that the software has been installed and you need to reboot.

Remove the usb thumbdrive

Reboot the DCP2000
(meny – logout – reboot)

Check the notifications after the reboot to see if the update was successful.

Upgrade firmware to 21.05b (if necessary)

Install Firmware + update key

Insert thumb drive, the ingest manager will open automatically
(to open it manually: Meny – Doremi apps – ingest manager)

Choose these while holding in ctrl

dcp2000_fw_dci-21.05b.pkg

dolphin_21.05b-c_XXXXXX.drm.zip

Click ingest

Screenshot of ingest manager choosing  dcp2000_fw_dci-21.05b.pkg  dolphin_21.05b-c_XXXXXX.drm.zip


You will get an message that says that the software has been installed and you need to reboot.

Remove the usb thumbdrive

Reboot the DCP2000
(meny – logout – reboot)

Check the notifications after the reboot to see if the update was successful.

Upgrade Security Manager to 2.2.1-0

Choose security manager and upgrade key

Insert thumb drive, the ingest manager will open automatically
(to open it manually: Meny – Doremi apps – ingest manager)

Choose these while holding in ctrl

dcp2000_dolphin_sm-2.2.1-0.pkg

sbc405-2.2.1_XXXXXX.drm.zip

Screenshot of ingest manager choosing  dcp2000_dolphin_sm-2.2.1-0.pkg
sbc405-2.2.1_XXXXXX.drm.zip

You will get an message that says that the software has been installed and you need to reboot.

Remove the usb thumbdrive

Reboot the DCP2000
(meny – logout – reboot)

Check the notifications after the reboot to see if the update was successful.

Install hotfix

Insert thumb drive, the ingest manager will open automatically
(to open it manually: Meny – Doremi apps – ingest manager)

Choose Dcp2000_ims2_sw_hotfix_accumulated_updates_2.8.52-1.0.0.pkg

Click on ingest

Screenshot of ingest manager choosing  Dcp2000_ims2_sw_hotfix_accumulated_updates_2.8.52-1.0.0.pkg

You will get an message that says that the software has been installed and you need to reboot.

Remove the usb thumbdrive

Reboot the DCP2000
(meny – logout – reboot)

Check the notifications after the reboot to see if the update was successful.

Upgrade Certificates

Insert thumb drive, the ingest manager will open automatically
(to open it manually: Meny – Doremi apps – ingest manager)

Choose Dolby-Cert_Extension_SN_XXXXX.pkg
(You can see the whole filename when hovering the mouse pointer over it.)

Click on ingest

Screenshot of ingest manager choosing  Dolby-Cert_Extension_SN_XXXXX.pkg

You will get an message that says that the software has been installed and you need to reboot.

Remove the usb thumbdrive

Reboot the DCP2000
(meny – logout – reboot)

Check the notifications after the reboot to see if the update was successful.

Check if the DCP2000 has been upgraded

Run Diagnostic tool

Screenshot of diagnostic tool showing new versions nr

Leave a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.