Intel AMT Features > Access Monitor > Use Cases > Lock and Unlock the Audit Log
CollapseAll image

Lock and Unlock the Audit Log

The following steps describe how to lock and unlock the Audit Log.

1.  Retrieve the instance of AMT_AuditLog, where the “Name” key equals “Intel(r) AMT:Audit Log”.

2.  To lock the audit log, invoke AMT_AuditLog.SetAuditLock with the following parameter values:

Parameter

Value

LockTimeoutInSeconds

The maximum number of seconds to lock the audit log (maximum value = 5 minutes)

Flag

Select one of the following:

     0 (AUDIT_LOG_LOCK)

     1 (UNPROVISIONING_LOCK)

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

  

$auditLogRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_AuditLog WHERE Name='Intel(r) AMT:Audit Log'")

$inputObject =$auditLogRef.CreateMethodInput("SetAuditLock")

$inputObject.SetProperty("LockTimeoutInSeconds","180")

$inputObject.SetProperty("Flag","0")

$outpObject =$auditLogRef.InvokeMethod($inputObject)

$returnValue =$outpObject.GetProperty("ReturnValue")

if($returnValue -like "0")

{

    $handle =$outpObject.GetProperty("Handle")

}

 

 

3.  To unlock the audit log, either:

   Wait the number of seconds defined in the LockTimeoutInSeconds parameter of the locking call.

   Invoke AMT_AuditLog.SetAuditLock with the Flag 2 (AUDIT_LOG_UNLOCK) flag and the handle returned from the locking call.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

  

# $handle is the handle that was returned by the lock request.

$auditLogRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_AuditLog WHERE Name='Intel(r) AMT:Audit Log'")

$inputObject =$auditLogRef.CreateMethodInput("SetAuditLock")

$inputObject.SetProperty("Flag","2")

$inputObject.SetProperty("Handle",$handle.ToString())

$outpObject =$auditLogRef.InvokeMethod($inputObject)

$returnValue =$outpObject.GetProperty("ReturnValue")

 

 

Instance Diagram

Classes Used in This Flow

   AMT_AuditLog

SDK Sample

If there is a sample demonstrating this flow, it is included in the SDK installation file. See SDK Installation Layout for details.

 

See Also:

   Returning to an Unconfigured StateView the Audit Policy Details

Copyright © 2006-2022, Intel Corporation. All rights reserved.