HDCP — High-bandwidth Digital Content Protection

High-bandwidth Digital Content Protection

See video/edid-management for EDID interaction, and maintenance/av-troubleshooting-methodology for HDCP diagnostic steps.

HDCP is a copy-protection protocol that encrypts the digital video signal between each transmitter and receiver in an HDMI signal chain. It was developed by Intel and is licensed by Digital Content Protection LLC. For a source to output protected content (streaming services, HDCP-encrypted Blu-ray, cable/satellite broadcast), every link in the chain — source to switcher, switcher to extender, extender to display — must complete HDCP authentication. A single non-compliant device blocks the signal. The result is typically a black screen with an "HDCP Error," "Signal Not Supported," or simply no output.

HDCP Versions

HDCP 2.2 is the critical threshold for 4K systems. If any component — including an HDMI cable's embedded chip, an HDBaseT extender output card, or a distribution amplifier — supports only HDCP 1.4, 4K protected content is blocked at that link.

Authentication Sequence

HDCP authentication occurs in three phases:

1. Authentication and key exchange — transmitter and receiver exchange certificates and establish an encrypted session key
2. Locality check — verifies the receiver is within an acceptable propagation distance (prevents network retransmission)
3. Session key and encryption — encrypted video stream begins

Authentication is triggered at every signal chain change: source power-on, routing switch in a matrix, display wake from standby, cable reconnection. The handshake takes 1–3 seconds; during this time the display shows a black screen. Configuring a switcher to maintain HDCP authentication continuously (available in most professional switchers as "HDCP Always On" or "HDCP Force") eliminates repeated handshakes on routing changes.

HDCP Repeaters

A switcher or distribution amplifier in an HDMI chain acts as an HDCP repeater — it authenticates with the upstream source as a sink, and with the downstream display as a source. The HDCP specification limits repeater chains to a maximum of 7 hops and 128 downstream devices. In practice, a chain of: source → DM Switcher → HDBaseT extender → display is 3 hops, well within limits.

Common Pitfalls

• Single HDCP 1.4 device blocks 4K protected content. The symptom is that unprotected 4K (laptop desktop, unencrypted media player) works fine but 4K streaming services produce a black screen. Fix: audit every device in the chain using manufacturer specifications; any device rated only HDCP 1.4 must be replaced or bypassed.

• HDCP flickering on routing changes. Every time a matrix switcher re-routes a signal, HDCP re-authenticates, causing a 1–3 second black flash. Fix: enable HDCP Always On mode in the switcher so authentication is maintained on all ports continuously, regardless of routing changes.

• HDCP failure misdiagnosed as cable fault. Intermittent HDCP authentication failure and cable signal degradation produce identical symptoms (black screen, signal loss). Fix: test with an unprotected source (laptop desktop at native resolution); if unprotected works but protected content does not, HDCP is the cause, not the cable.

• Older HDBaseT receivers not supporting HDCP 2.2. Early HDBaseT 1.0 receivers and extenders (pre-2015) support only HDCP 1.4. They pass unprotected 4K correctly but block 4K protected content. Fix: verify HDCP 2.2 support in the device spec sheet before installation; replace first-generation HDBaseT hardware in 4K systems.