Developer Guide

  • 10/27/2020
  • Public Content
Contents

Trusted Application Fields Required Properties

The following are required manifest fields.  Without these fields filled in correctly, a trusted application cannot be signed.
Field name
Field Type
Field Format
Description
Available to host
Supported Since
firmware.min_version
Version
Form: (major.minor.hotfix.build)
major/minor/hotfix are decimal numbers in [0,999] (max chars length is 3)
Build is decimal number in [2000,9999] (chars length is 4). Those numbers may contain leading zeros (e.g. 1.01.5.2000)
Specifies the minimal firmware version the applet is allowed to be installed on. The build version is used internally by the Intel signing server which signs applets for use on production platforms. It has no real impact on pre-production applets.
Removed in API level 7 (Intel® Management Engine (Intel® ME) 11.0) to support sign once capability.
Yes
> Intel ME 7.x  
applet.id
UUID/GUID
String of the following format:
[8 digits]-[4 digits]-[4 digits]-[4 digits]-[12 digits] where a digit is a char in [0-9,A-F,a-f]
This field determines the globally unique identifier for the applet. This ID must be maintained for the applet across versions/platforms.
Yes
Intel ME 7.x  
applet.name
String
1 <= charLength < 80
A descriptive name for the applet
Yes
Intel ME 7.x  
applet.vendor
String
1 <= charLength < 80
A descriptive name for the applet vendor
Yes
Intel ME 7.x  
applet.version
Version
Form: <major>.<minor>
major/minor are decimal numbers in [0,255] (max chars length is 3).
Those numbers may contain leading zeros (e.g. 06.00)
The version of the applet. Applet versions can be upgraded/downgraded.
Yes
Intel ME 7.x
security.version
Decimal Integer
 
The security version of the applet. Should only be increased in case of a security bug in the applet that exposes platform/product secrets. Once an applet with a certain security version is installed, an applet with a lower security version will be rejected
Yes
Intel ME 7.x
applet.heap.size
Decimal Integer
 
The heap size allocated for an applet instance in bytes
No
Intel ME 7.x
applet.platform
String
Supported values: ME, SEC or CSE.
Note: The string must be in CAPITAL letters.
Specifies the platform the applet is allowed to be installed on. An applet must be signed for a specific platform type and can’t load on different ones unless re-signed.
Yes
Intel ME 8.x,
Intel® Trusted Execution Engine (Intel® TXE) 1.x
applet.api.level
Integer
 
Specifies the minimum API level that the platform requires.
Yes
Intel ME 10.0
applet.access.control
Integer
See Access Control section below
Specifies the Java* classes and packages that the applet is allowed to use.
No
Intel ME 11.0
 

Product and Performance Information

1

Intel's compilers may or may not optimize to the same degree for non-Intel microprocessors for optimizations that are not unique to Intel microprocessors. These optimizations include SSE2, SSE3, and SSSE3 instruction sets and other optimizations. Intel does not guarantee the availability, functionality, or effectiveness of any optimization on microprocessors not manufactured by Intel. Microprocessor-dependent optimizations in this product are intended for use with Intel microprocessors. Certain optimizations not specific to Intel microarchitecture are reserved for Intel microprocessors. Please refer to the applicable product User and Reference Guides for more information regarding the specific instruction sets covered by this notice.

Notice revision #20110804