Add/Remove a CRL Element

Setup and Configuration of Intel AMT > Configuration Settings > Certificate Management > Use Cases > Add/Remove a CRL Element

Add/Remove a CRL Element

The following steps describe how to add an item to the Intel AMT Certificate Revocation List (CRL).

1. Retrieve the instance of AMT_PublicKeyManagementService, where the “Name” key equals “Intel(r) AMT Public Key Management Service”.

2. Invoke AMT_PublicKeyManagementService.AddCRL with the following parameters:

Parameter	Value
Url	The issuer URL of the revoked certificate.
SerialNumber	Serial number of the revoked certificate.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

$publicKeyManagementServiceRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_PublicKeyManagementService WHERE Name='Intel(r) AMT Public Key Management Service'")

$url ="http://issuerURL.demo.com"

$serialNumber ="6thBACoJqACYDiIAHwAAAA=="

$inputObject =$publicKeyManagementServiceRef.CreateMethodInput("AddCRL")

$inputObject.AddProperty("Url",$url)

$inputObject.AddProperty("SerialNumbers",$serialNumber)

$outputObject =$publicKeyManagementServiceRef.InvokeMethod($inputObject)

$returnValue =$outputObject.GetProperty("ReturnValue")

if($returnValue -like "0")

{

$crl =$outputObject.GetProperty("CRL")

}

note-icon Note:

• The method returns the EPR of the AMT_CRL instance representing the CRL element that was created.

• To reset CRL in Intel AMT use the AMT_PublicKeyManagementService.ResetCRLList method.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

$publicKeyManagementServiceRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_PublicKeyManagementService WHERE Name='Intel(r) AMT Public Key Management Service'")

$inputObject =$publicKeyManagementServiceRef.CreateMethodInput("ResetCRLList")

$outputObject =$publicKeyManagementServiceRef.InvokeMethod($inputObject)

$returnValue =$outputObject.GetProperty("ReturnValue")

Instance Diagram

Classes Used in This Flow

• AMT_PublicKeyManagementService

• CIM_HostedService

SDK Sample

If there is a sample demonstrating this flow, it is included in the SDK installation file. See SDK Installation Layout for details.
See Also:
• Detailed Description