topic Re:802.1x authentication and strong certificate mapping KB5014754 in Intel vPro® Platform

802.1x authentication and strong certificate mapping KB5014754

KrisTiteca — Tue, 28 Jan 2025 13:01:37 GMT

Hi,

We have noticed that we have warning events in AD for certificate authentication of Intel AMT 802.1x certificates. This is related to the strong certificate mapping changes Microsoft is rolling out, specified in KB5014754 . This means with the security patching of February this would break the authentication flow for Intel AMT. Now, we will still be able to make it work using a registry key but later this year it would become a real problem. Looking at the Intel EMA interface I don't see an option to address this problem. Is there a plan/solution on how to make certificates issued by Intel EMA for 802.1x to be compliant with the strong certificate mapping changes?

Thanks in advance,

Kris

Re: 802.1x authentication and strong certificate mapping KB5014754

pujeeth — Wed, 29 Jan 2025 00:53:53 GMT

Hello Kris,

Greetings!

Thank you for bringing your query to us.

Kindly allow us sometime we are checking with our internal team and will get back to you with an update as soon as possible.

Regards

Pujeeth

Intel customer support technician

Re:802.1x authentication and strong certificate mapping KB5014754

Suneesh — Tue, 04 Feb 2025 00:56:27 GMT

Hi Kris,

Good day.

Thank you for bringing this to our attention. We understand that the workaround provides a temporary solution until September, and we have escalated this to both Product Management and the Software Development team. They are now assessing the best long-term solution and scoping the work required for an EMA update.

We truly appreciate your partnership and collaboration. At this time, we anticipate an update to be targeted for an EMA 1.14.x release later this year.

Thanks again for your support.

Best regards,

Suneesh_intel

Re: Re:802.1x authentication and strong certificate mapping KB5014754

KrisTiteca — Tue, 04 Feb 2025 07:48:30 GMT

Hey Suneesh,

That works for me.

Thank you!

Kris

Re:802.1x authentication and strong certificate mapping KB5014754

Suneesh — Tue, 04 Feb 2025 23:54:54 GMT

Hello Kris,

Thanks for the confirmation.

If further assistance is necessary, please do not hesitate to reply.

Regards,

Suneesh_intel