Cardsharing server: how it works, how to set it up, and how to choose a reliable provider

Cardsharing allows a single physical smart card from a satellite or cable TV provider to serve multiple receivers simultaneously over the internet. The technology has existed for over twenty years and remains a working method of accessing paid channels — provided the server is stable and the provider does not cut corners on infrastructure.

What cardsharing is and why it is needed

An ordinary smart card inserted into a receiver decrypts the signal for one device only. A cardsharing server changes this scheme: the card is inserted into a dedicated card server (or a receiver that supports server mode), which reads the control words — short 8-byte keys that update every 10 seconds — and distributes them over the network to authorized clients.

The client receiver picks up the encrypted signal from the satellite, requests the current control word from the server, and decrypts the picture. From the user's perspective the process looks like ordinary TV viewing: channels open up and the picture plays without delays.

How a cardsharing server works

Key transmission protocols

Keys are transmitted using one of several protocols. The three most common are:

• CCcam — the oldest protocol, developed for Dream Multimedia equipment. Operates on port 12000 by default. Supported by virtually all modern receivers: Dreambox, VU+, Gigablue, Openbox, MAG. Data is transmitted in encrypted form using a proprietary algorithm based on SHA-1.
• Newcamd — a protocol with stricter encryption (DES), popular among providers with commercial infrastructure. The standard port is 28910. Works well on lines with unstable ping, as it handles brief connection drops better.
• CS378x (Camd35) — a more modern variant that uses AES encryption. Less common, but delivers better performance under high loads.

The chain from card to screen

The full chain looks like this: satellite dish → client receiver (receives the encrypted stream) → control word request to the cardsharing server → server queries the physical card → card returns the decrypted word → server sends it to the client → receiver decrypts the stream and displays it on screen.

The critically important parameter is the latency (ping) between the client and the server. With latency up to 100 ms there are no issues. At 100–300 ms occasional freezes may occur at the moment the key changes. With latency above 300 ms the screen will regularly go black for 1–2 seconds every 10 seconds — that is exactly how long a single control word lives.

Server infrastructure

A commercial cardsharing provider maintains several physical servers in different data centers. Cards are inserted into specialized card readers connected to the servers. For redundancy a primary/backup scheme is used: if the primary server does not respond for more than 2–3 seconds, the client automatically switches to the backup. Professional providers maintain a minimum of two independent nodes — for example, one in the Netherlands and a second in Germany or Poland.

Setting up a cardsharing client on a receiver

Setting up CCcam on Dreambox and VU+

On receivers running Enigma2 (Dreambox DM900, VU+ Duo 4K, Gigablue UHD Quad 4K) the CCcam client is configured via the file/etc/CCcam.cfg. The basic connection line looks like this:

C: server.provider.com 12000 login password

Hereserver.provider.com — is the address of the provider's server,12000 — port,login andpassword — account credentials. After saving the file, CCcam is restarted via a command through the receiver menu or SSH.

Important detail: most providers give you a server IP address rather than a domain name. If the provider gives a domain — make sure DNS on the receiver is configured correctly, otherwise the card won't find the server after a reboot.

Setting up Newcamd on OpenBox and Formuler

On receivers without Enigma2, such as OpenBox S3 or Formuler F4 Turbo, the Newcamd connection is configured through the conditional access menu. You will need: server address, port (usually in the range 28900–28960), username, password, and a 14-digit DES key provided by the provider along with the account credentials. Without the correct DES key the connection will be established, but cards will not decrypt.

Setup via Oscar/Softcam Panel

On Enigma2 devices it is more convenient to use an emulator management panel — for example, Softcam Panel or OpenWebif. Through the receiver's web interface (accessible via its IP address in a browser) you can upload a configuration file, start and stop the emulator, and also view the connection log in real time — this helps quickly diagnose problems.

What to look for when choosing a provider

Server stability and uptime

The key parameter is uptime. A reliable provider publishes availability statistics on a dedicated status site or in the user account. An acceptable figure is 99.5% and above. This means no more than 3.5 hours of downtime per month. If a provider does not publish uptime statistics — that is a red flag: most likely the numbers are not in their favor.

Clarify how redundancy is arranged. A single server with no backup is unacceptable for a paid subscription. The minimum reliable setup: two physical servers in different locations with automatic failover within 2–5 seconds.

Channel packages and supported satellites

Make sure the provider actually holds cards for the packages you need. Common packages — Viasat, NTV-Plus, Tricolor TV (for some channels), Canal+ — require different cards and different authorization conditions. Some providers advertise a wide list, but in practice some channels work intermittently or are unavailable altogether.

Ask for a trial period — 24–72 hours. A legitimate provider will offer one. During that time check all the channels you are interested in at different times of day, including prime time (19:00–23:00), when the server load is at its peak.

Technical support

Response speed of support matters: when the screen goes dark in the middle of a match, waiting 12 hours for an email reply is unpleasant. The best option is support via Telegram or online chat with a response time of up to 30 minutes during business hours. Even better — round-the-clock support, especially if the server serves clients from different time zones.

A useful test: ask support a technical question before purchasing a subscription. For example, ask which DES key to use for a Newcamd connection or how to configure a fallback server. The answer will reveal the real level of competence of the team.

Payment scheme and refund conditions

Beware of providers who only sell access in large blocks — for 6 or 12 months with no refund option. A reliable service offers monthly plans and is willing to refund money for an unused period if the service is not working.

Anonymous payment methods (cryptocurrency, anonymous wallets) are the norm for this market. But if a provider only accepts cryptocurrency and has no contact details other than a Telegram account — the risks increase.

Common problems and their solutions

Black screen on certain channels

If some channels open and others show a black screen — the problem is not with the server connection, but with the provider not having a card for that specific package. Check via the emulator log: the receiver receives a "Not Found" or "Card not available" response. This means the provider does not hold the corresponding card, or it is temporarily unavailable.

Periodic picture freezes

If the screen goes black for 1–2 seconds every ~10 seconds — this is a classic symptom of high ping or an overloaded server. Measure the latency to the provider's server using the commandping server.provider.com. If the ping is normal (up to 80 ms) and the freezes continue — the server is overloaded and cannot distribute keys to all clients in time. Contact support or switch providers.

The receiver does not connect to the server

First diagnostic steps: check that the login and password are correct, make sure the port is not blocked by the internet provider, check server availability via ping. Some Russian internet providers block non-standard ports — in this case, a VPN or switching to a standard port (80 or 443) will help, if the cardsharing provider supports it.

Security and technical limitations

Cardsharing requires a constant internet connection — without it, cards cannot be decrypted. The minimum sufficient internet speed is 1 Mbps, but stability is more important: packet loss above 2–3% causes the same symptoms as high ping.

One account is designed for one simultaneous connection. Using the same credentials on two receivers at the same time is usually detected by the server and results in account blocking. If you need to cover multiple TVs — purchase separate lines or check with your provider about multi-connection terms.

How to compare providers

Before purchasing a subscription, put together a short checklist. The provider should: publish real uptime statistics, provide test access, have backup servers, answer technical questions substantively, and offer monthly payment. A provider that does not meet at least three of the five criteria will most likely cause problems.

Reviews on specialized forums — sat-inform, satinfo, Enigma2 forums — give a more objective picture than the description on the provider's own website. Look for reviews no older than three months: the situation in this market changes quickly, and a provider with an excellent reputation from a year ago may have already degraded.

Technically competent client configuration and the right choice of provider are two equally important conditions for stable operation. Even the best server will not fix an incorrectly entered DES key, and even a perfectly configured receiver will not help if the provider's server is running intermittently.