Remote Configuration (PKI-CH) Preparation

Setup and Configuration of Intel AMT > Setup and Configuration Methods > Remote Configuration > Remote Setup and Configuration Flows > Use Cases > Remote Configuration (PKI-CH) Preparation

Remote Configuration (PKI-CH) Preparation

The following describes the initial steps that may be required when performing remote configuration.

1. Retrieve the instance of AMT_SetupAndConfigurationService, where the “Name” key equals “Intel(r) AMT Setup and Configuration Service”.

2. Extend the provisioning period (to avoid the possibility that the network interface will be closed by Intel AMT during the configuration process) by invoking AMT_SetupAndConfigurationService.ExtendProvisioningPeriod. Set the Duration to a large enough value to ensure completion of setup and configuration. The units are hours, with 24 the maximum value.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

$setupAndConfigurationServiceRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_SetupAndConfigurationService WHERE Name='Intel(r) AMT Setup and Configuration Service'")

$inputObject =$setupAndConfigurationServiceRef.CreateMethodInput("ExtendProvisioningPeriod")

$inputObject.SetProperty("Duration","1") # Max value = 24.

$outputObject =$setupAndConfigurationServiceRef.InvokeMethod($inputObject)

$returnValue =$outputObject.GetProperty("ReturnValue")

3. Verify the Provisioning Server One Time Password (OTP) of the Intel AMT device by performing AMT_SetupAndConfigurationService.Get and examining the property AMT_SetupAndConfigurationService.ProvisioningServerOTP and verifying that it has the expected value.

Click here for a snippet demonstrating this step

See Snippet Functions for the ConvertToBase64 function.

You can execute this snippet by inserting it into the execution template found here.

$otpPasswordByHECI ="P@ssw0rd" # The password that was created by the HECI command.

$setupAndConfigurationServiceRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_SetupAndConfigurationService WHERE Name='Intel(r) AMT Setup and Configuration Service'")

$setupAndConfigurationServiceInstance =$setupAndConfigurationServiceRef.Get()

$provisioningServerOTP =$setupAndConfigurationServiceInstance.GetProperty("ProvisioningServerOTP")

$otpAdminPassword = ConvertToBase64 $otpPasswordByHECI

$isValidOTP =if($provisioningServerOTP -like $otpAdminPassword) {$true} else {$false}

4. Modify the MEBx password: The default MEBx password must be changed for configuration to complete successfully. Invoke AMT_SetupAndConfigurationService.SetMEBxPassword, providing a strong password. The supplied password must be a strong password, as described in Valid Usernames and Passwords.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

$setupAndConfigurationServiceRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_SetupAndConfigurationService WHERE Name='Intel(r) AMT Setup and Configuration Service'")

$inputObject =$setupAndConfigurationServiceRef.CreateMethodInput("SetMEBxPassword")

$inputObject.SetProperty("Password","P@ssw0rd")

$outputObject =$setupAndConfigurationServiceRef.InvokeMethod($inputObject)

$returnValue =$outputObject.GetProperty("ReturnValue")

Instance Diagram

Classes Used in This Flow

• AMT_SetupAndConfigurationService

SDK Sample

Not applicable