CollapseAll image

Add a Public Key Certificate

The following steps describe how to add a public key certificate to the Intel AMT certificate store.

1.  Create a public key certificate blob in Base64 format.

2.  Retrieve the instance of AMT_PublicKeyManagementService, where the “Name” key equals “Intel(r) AMT Public Key Management Service”.

3.  Invoke AMT_PublicKeyManagementService.AddCertificate with the following parameter:




The public key certificate blob created in step 1.


note-icon  Note:

The method returns the EPR of the AMT_PublicKeyCertificate instance representing the certificate that was created. This EPR is used in the Remove a Public Key Certificate flow.


Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.


$certificateBlob = # The public key certificate blob created in step 1.

$publicKeyManagementServiceRef = $wsmanConnectionObject.NewReference("SELECT * FROM AMT_PublicKeyManagementService WHERE Name='Intel(r) AMT Public Key Management Service'")

$inputCertificate = $publicKeyManagementServiceRef.CreateMethodInput("AddCertificate")

$inputCertificate.AddProperty("CertificateBlob", $certificateBlob)

$outputObject = $publicKeyManagementServiceRef.InvokeMethod($inputCertificate)

$returnValue = $outputObject.GetProperty("ReturnValue")

if($returnValue -like "0")


          # The $publicKeyCertificateRef is an EPR to the new AMT_PublicKeyCertificate object.

    $publicKeyCertificateRef = $outputObject.GetProperty("CreatedCertificate").Ref




Instance Diagram

Classes Used in This Flow

SDK Sample

Not applicable


Copyright © 2006-2013, Intel Corporation. All rights reserved.