I tried to put certificates into the Management Engine and to configure it using TLS.
Instead of using the Manageability Director, Commander ... I tried to make this configuration with WinRM.
Therefore I read:
http://software.intel.com/sites/manageability/AMT_Implementation_and_Ref...
--> Intel AMT Features
--> Transport Layer Security
--> Use Cases
--> * Set/Update the TLS Credentials Certificate
--> * Set TLS to Server/Mutual Authentication
To >>Discovering CIM_ComputerSystem<< I typed:
-----------------------------------------------------------------------------------------------------------------------
D:\\IAMT>winrm enumerate http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_Co
mputerSystem -remote:http://192.168.0.81:16992/wsman -encoding:utf-8 -un -auth:D
igest -username:admin -password:*****************
-----------------------------------------------------------------------------------------------------------------------
the result I got, is:
-----------------------------------------------------------------------------------------------------------------------
CIM_ComputerSystem
CreationClassName = CIM_ComputerSystem
Dedicated = 33
ElementName = Managed System
EnabledDefault = 5
EnabledState = 2
HealthState = 5
IdentifyingDescriptions = CIM:GUID
Name = ManagedSystem
NameFormat = Other
OperationalStatus = 0
OtherIdentifyingInfo = 00000000000000000000000000000000
RequestedState = 12
CIM_ComputerSystem
CreationClassName = CIM_ComputerSystem
Dedicated = 14
ElementName = Intel AMT Subsystem
EnabledDefault = 5
EnabledState = 5
HealthState = 5
Name = Intel AMT
NameFormat = Other
OperationalStatus = 0
RequestedState = 12
-----------------------------------------------------------------------------------------------------------------------
So I got the CIM_ComputerSystem which represents Intel AMT. The second block of the result ist the
CIM_ComputerSystem, which represents Intel AMT.
And now?
Now the manual says that the next step that must be done is:
>> 2. From the CIM_ComputerSystem instance, traverse the CIM_HostedAccessPoint association class to find the instance of AMT_TLSProtocolEndpoint. <<
1. But how can this step be done with WinRM?
2. Does anybody know a link to WinRM samples, which performs such configurations?
Thanks in advance for your help.


