CollapseAll image

Disable Client Control Mode

The following steps describe how to disable the Client Control Mode. Performing this flow will change the value of the IPS_HostBasedSetupService.AllowedControlModes property.

After executing this flow, it is still possible to Perform Local Setup Directly to Admin Control Mode.

1.  Retrieve the $$OsAdmin credentials by invoking the MEI command CFG_GetLocalSystemAccount, which returns the user ID (always $$OsAdmin) and a randomly generated password. Alternatively, invoke the WMI method OOB_Service.GetLocalAdminCredentials via the ME WMI provider. (See Intel ME WMI Provider). The PC user who performs this step must have OS Admin privileges on the host platform. Use the returned credentials for the following WS-Management requests.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

  

$connectionWMI = Invoke-WmiMethod-Class OOB_Service -Namespace "ROOT\Intel_ME:OOB_Service" -ComputerName "localhost" -Name "GetLocalAdminCredentials"

$user =$connectionWMI.Username

$password =$connectionWMI.Password

 

 

2.  Retrieve the instance of IPS_HostBasedSetupService, where the “Name” key equals “Intel(r) AMT Host Based Setup Service”.

3.  Invoke IPS_HostBasedSetupService.DisableClientControlMode.

 Note:

   Once Client Control Mode is disabled, it is irreversible via a software request via the Intel AMT API. An OEM BIOS implementation may provide an unconfigure command that will reset Client Control Mode availability back to OEM factory default.

   If Intel AMT is already setup and in Client Control Mode, this command will only prevent future attempts to perform host-based setup.

 

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

  

$hostBasedSetupServiceRef =$wsmanConnectionObject.NewReference("SELECT * FROM IPS_HostBasedSetupService WHERE Name='Intel(r) AMT Host Based Setup Service'")

$inputObject =$hostBasedSetupServiceRef.CreateMethodInput("DisableClientControlMode")

$outputObject =$hostBasedSetupServiceRef.InvokeMethod($inputObject)

$returnValue =$outputObject.GetProperty("ReturnValue")

 

 

Instance Diagram

Classes Used in This Flow

   IPS_HostBasedSetupService

SDK Sample

Located at: <SDK_Root>\Windows\ Intel_AMT\Samples\Configuration\HostBasedSetup.

 

Copyright © 2006-2022, Intel Corporation. All rights reserved.