Set/Update the TLS Credentials Certificate

Setup and Configuration of Intel AMT > Configuration Settings > Transport Layer Security > Use Cases > Set/Update the TLS Credentials Certificate

Set/Update the TLS Credentials Certificate

The following steps describe how to define which certificate the Intel AMT will send when using TLS.

1. Retrieve an EPR to AMT_TLSProtocolEndpointCollection, where the “ElementName” key equals “TLSProtocolEndpointInstances Collection”.

2. From the AMT_TLSProtocolEndpointCollection instance, search for an AMT_TLSCredentialContext instance and perform one of the following:

• If the AMT_TLSCredentialContext instance exists, set the following property and then invoke AMT_TLSCredentialContext.Put:

Property	Value
ElementInContext	The EPR of the certificate you want Intel AMT to send when using TLS. This EPR was saved when the certificate was added to Intel AMT (see Add a Public Key Certificate).

• If the AMT_TLSCredentialContext instance does not exist, invoke AMT_TLSCredentialContext.Create with the following properties:

Property	Value
ElementInContext	The EPR of the certificate you want Intel AMT to send when using TLS (see Add a Public Key Certificate).
ElementProvidingContext	The EPR of the AMT_TLSProtocolEndpointCollection instance.

Click here for a snippet demonstrating this step

This snippet depends on the existence of an EPR to a certificate object created in a diferent use case. See Add a Public Key Certificate.

You can execute this snippet by inserting it into the execution template found here.

$tlsProtocolEndpointCollectionRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_TLSProtocolEndpointCollection WHERE ElementName='TLSProtocolEndpoint Instances Collection'")

$tlsCredentialContextInstance =$wsmanConnectionObject.NewInstance("AMT_TLSCredentialContext")

# $publicKeyCertificateRef is an EPR to the AMT_PublicKeyCertificate object created by the 'Add a Public Key Certificate' use case.

$tlsCredentialContextInstance.SetProperty("ElementInContext",$publicKeyCertificateRef)

$tlsCredentialContextInstance.SetProperty("ElementProvidingContext",$tlsProtocolEndpointCollectionRef)

$tlsCredentialContextInstance.Create()

Instance Diagram

Classes Used in This Flow

• AMT_TLSCredentialContext

• AMT_TLSProtocolEndpointCollection

• AMT_TLSProtocolEndpoint

• AMT_TLSSettingData

• CIM_HostedAccessPoint

• CIM_MemberOfCollection

SDK Sample

Not applicable