Setting a System-Defense Policy for Remote Networks

Setup and Configuration of Intel AMT > Configuration Settings > Environment Detection > Use Cases > Setting a System-Defense Policy for Remote Networks

Setting a System-Defense Policy for Remote Networks

The following steps describe how to set a System-Defense Policy for remote networks that are not part of the Enterprise network.

1. Create and select the appropriate instance of AMT_SystemDefensePolicy to be used on remote networks (see Create a System Defense Policy).

2. Retrieve the instance of AMT_EnvironmentDetectionSettingData, where the “InstanceID” key is “Intel(r) AMT Environment Detection Settings”.

3. Invoke AMT_EnvironmentDetectionSettingData.SetSystemDefensePolicy with the following parameter:

Parameter	Value
Policy	The EPR of the System Defense Policy.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

$instanceID =# The InstanceID is the ID of the System Defense policy you want to enable.

$systemDefensePolicyRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_SystemDefensePolicy WHERE InstanceID='" +$instanceID +"'")

$environmentDetectionSettingDataRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_EnvironmentDetectionSettingData WHERE InstanceID='Intel(r) AMT Environment Detection Settings'")

$inputObject =$environmentDetectionSettingDataRef.CreateMethodInput("SetSystemDefensePolicy")

$inputObject.SetProperty("Policy",$systemDefensePolicyRef)

$outputObject =$environmentDetectionSettingDataRef.InvokeMethod($inputObject)

$returnValue =$outputObject.GetProperty("ReturnValue")

Instance Diagram

Classes Used in This Flow

• AMT_EnvironmentDetectionSettingData

• AMT_SystemDefensePolicy

SDK Sample

Not applicable