CollapseAll image

Add a Public Key Certificate

The following steps describe how to add a public key certificate to the Intel AMT certificate store.

1.  Create a public key certificate blob in Base64 format.

2.  Retrieve the instance of AMT_PublicKeyManagementService, where the “Name” key equals “Intel(r) AMT Public Key Management Service”.

3.  Invoke AMT_PublicKeyManagementService.AddCertificate with the following parameter:




The public key certificate blob created in step 1.


note-icon Note:

The method returns the EPR of the AMT_PublicKeyCertificate instance representing the certificate that was created. This EPR is used in the Remove a Public Key Certificate flow.


Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.


$certificateBlob =# The public key certificate blob created in step 1.

$publicKeyManagementServiceRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_PublicKeyManagementService WHERE Name='Intel(r) AMT Public Key Management Service'")

$inputCertificate =$publicKeyManagementServiceRef.CreateMethodInput("AddCertificate")


$outputObject =$publicKeyManagementServiceRef.InvokeMethod($inputCertificate)

$returnValue =$outputObject.GetProperty("ReturnValue")

if($returnValue -like "0")


          # The $publicKeyCertificateRef is an EPR to the new AMT_PublicKeyCertificate object.

    $publicKeyCertificateRef =$outputObject.GetProperty("CreatedCertificate").Ref




Instance Diagram

Classes Used in This Flow

SDK Sample

Not applicable


Copyright © 2006-2022, Intel Corporation. All rights reserved.