The following steps describe how to add a public key certificate to the Intel AMT certificate store.
1. Create a public key certificate blob in Base64 format.
2. Retrieve the instance of AMT_PublicKeyManagementService, where the “Name” key equals “Intel(r) AMT Public Key Management Service”.
3. Invoke AMT_PublicKeyManagementService.AddCertificate with the following parameter:
Parameter | Value |
Certificateblob | The public key certificate blob created in step 1. |
Note: |
The method returns the EPR of the AMT_PublicKeyCertificate instance representing the certificate that was created. This EPR is used in the Remove a Public Key Certificate flow. |
Click here for a snippet demonstrating this step
You can execute this snippet by inserting it into the execution template found here.
$certificateBlob =# The public key certificate blob created in step 1.
$publicKeyManagementServiceRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_PublicKeyManagementService WHERE Name='Intel(r) AMT Public Key Management Service'")
$inputCertificate =$publicKeyManagementServiceRef.CreateMethodInput("AddCertificate")
$inputCertificate.AddProperty("CertificateBlob",$certificateBlob)
$outputObject =$publicKeyManagementServiceRef.InvokeMethod($inputCertificate)
$returnValue =$outputObject.GetProperty("ReturnValue")
if($returnValue -like "0")
{
# The $publicKeyCertificateRef is an EPR to the new AMT_PublicKeyCertificate object.
$publicKeyCertificateRef =$outputObject.GetProperty("CreatedCertificate").Ref
}
Instance Diagram
Classes Used in This Flow
SDK Sample
Not applicable
Copyright © 2006-2022, Intel Corporation. All rights reserved. |