# HLS output with Apple FairPlay
<a name="drm-hls-applefairplay"></a>

Encryption mode: Always AES CBC (Sample AES)

Supported client players: Consult with the DRM solution provider (for SPEKE) or the key provider (DRM implementer) for supported players. For a self-generated key, the iOS players must be able to retrieve the key. For a generic key, the iOS player must be able to retrieve the key from the manifest.


| Description | Key provider (DRM implementer) | Version of server API from DRM implementer | Key rotation | 
| --- | --- | --- | --- | 
| The customer uses a SPEKE-compliant DRM solution for protecting HLS fMP4 output using Apple Fairplay DRM technology. | SPEKE | SPEKE v1.0 | Static, Rotating | 
| The customer uses a SPEKE-compliant DRM solution for protecting HLS output using Apple Fairplay DRM technology. | SPEKE<br />  | SPEKE v1.0 | Static, Rotating | 
| The customer uses the 1Mainstream DRM solution for protecting HLS output using the Apple Fairplay DRM technology. The end user plays the content on a 1Mainstream-approved player. | 1Mainstream | Version 1.1 | Static | 
| Elemental Live generates a key that it uses to encrypt the content. Elemental Live also puts that key at a customer-specified location; the client player retrieves the key from that location and decrypts the content. The end user plays the content on an iOS player.<br />Strictly speaking, this is an encryption solution, not a DRM solution.  | Self-Generated | Not applicable; key generated by Elemental Live | Static, Rotating | 
| Each customer has a key server. Elemental Live places the keys inside the manifest that is delivered with the content; the client player obtains the key from the manifest. The end user plays the content on an iOS player. | Generic Key Provider | Not applicable. | Static, Rotating |