- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi All,
I have tried to execute the SecureErase command by using the example in HLAPI but my app is always crash. I am sure that my target client is supported SecureErase. Here is my example code:
public void SetSecureEraseBootNext(IAMTInstance amt)
{
BootCapabilities bootCapabilities = amt.BootControl.BootCapabilities;
BootOptionsFlags flags = BootOptionsFlags.NONE;
if (bootCapabilities.SecureErase)
{
flags = BootOptionsFlags.SecureErase;
}
try
{
if (bootCapabilities.SecureErase)
{
// Here is the code crash
amt.BootControl.SetNextBoot(flags);
}
}
catch (ManageabilityException ex)
{
}
}
Could you please help?
Link Copied
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hey Bao
I don't see any code confirming that Secure Erase is allowable for the device.
You should look at Class AMT_BootCapabilities.SecureErase and validate for true, prior to initiating the action
What AMT version are we dealing with? It should be AMT 11+
Take a look at the blog" Remote Secure Erase with Intel® AMT", it should be of some assistance on this as well.
Joe
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks Joe.
I got it. But I got the error as following when I tried to implement the RSE command.
Could you please hlep?
Here is the code:
public void SetNextBoot(BootOptionsFlags options, FirmwareVerbosityEnum FWVerbosity)
{
try
{
IManagedReference bootSettingDataRef =
Connection.NewReference(
"SELECT * FROM AMT_BootSettingData WHERE InstanceID='Intel(r) AMT:BootSettingData 0'");
IManagedInstance bootSettingDataInstance = bootSettingDataRef.Get();
bootSettingDataInstance.SetProperty("BIOSPause", false);
bootSettingDataInstance.SetProperty("BIOSSetup", false);
bootSettingDataInstance.SetProperty("ConfigurationDataReset", false);
bootSettingDataInstance.SetProperty("ForcedProgressEvents", false);
bootSettingDataInstance.SetProperty("LockKeyboard", false);
bootSettingDataInstance.SetProperty("LockPowerButton", false);
bootSettingDataInstance.SetProperty("LockResetButton", false);
bootSettingDataInstance.SetProperty("LockSleepButton", false);
bootSettingDataInstance.SetProperty("ReflashBIOS", false);
bootSettingDataInstance.SetProperty("UserPasswordBypass", false);
bootSettingDataInstance.SetProperty("UseSafeMode", false);
bootSettingDataInstance.SetProperty("UseSOL", false);
bootSettingDataInstance.SetProperty("LockSleepButton", false);
bootSettingDataInstance.SetProperty("FirmwareVerbosity", 0);
//The Enforce Secure Boot option is enabled in AMT version 8.1 and above.
if (Utils.Utils.CompareVersions(version, "8.0") > 0)
bootSettingDataInstance.SetProperty("EnforceSecureBoot", false);
//The Remote Secure Erase option is enabled in AMT version 11.0 and above.
if (Utils.Utils.CompareVersions(version, "11.0") >= 0)
{
if (BootOptionsFlags.SecureErase == options)
{
bootSettingDataInstance.SetProperty("SecureErase", true);
bootSettingDataInstance.SetProperty("RSEPassword", "intel");
}
}
bootSettingDataRef.Put(bootSettingDataInstance);
}
catch (ManageabilityException ex)
{
}
}
Here is the error:
Bao
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hey Bao
The error message is suggesting a SOAP error, which we deprecated in Intel AMT 9.
What version of the Intel.WSMan.Scripting library are you using?
What version of the HLAPI.dll are you using?
Can you please provide a System Discovery XML for my review, please attach in a PM
Joe
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page