Intel® Business Client Software Development
Support for Intel® vPro™ software development and technologies associated with Intel vPro platforms.

Howto traverse CIM_HostedAccessPoint with WinRM

theperfectwave
Beginner
402 Views

I tried to put certificates into the Management Engine and to configure it using TLS.
Instead of using the Manageability Director, Commander ... I tried to make this configuration with WinRM.

Therefore I read:
http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments%2Fgetprovisioningmode.htm
--> Intel AMT Features
--> Transport Layer Security
--> Use Cases
--> * Set/Update the TLS Credentials Certificate
--> * Set TLS to Server/Mutual Authentication


To >>Discovering CIM_ComputerSystem<< I typed:

-----------------------------------------------------------------------------------------------------------------------
D:\\IAMT>winrm enumerate http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_Co
mputerSystem -remote:http://192.168.0.81:16992/wsman -encoding:utf-8 -un -auth:D
igest -username:admin -password:*****************
-----------------------------------------------------------------------------------------------------------------------


the result I got, is:
-----------------------------------------------------------------------------------------------------------------------
CIM_ComputerSystem
CreationClassName = CIM_ComputerSystem
Dedicated = 33
ElementName = Managed System
EnabledDefault = 5
EnabledState = 2
HealthState = 5
IdentifyingDescriptions = CIM:GUID
Name = ManagedSystem
NameFormat = Other
OperationalStatus = 0
OtherIdentifyingInfo = 00000000000000000000000000000000
RequestedState = 12

CIM_ComputerSystem
CreationClassName = CIM_ComputerSystem
Dedicated = 14
ElementName = Intel AMT Subsystem
EnabledDefault = 5
EnabledState = 5
HealthState = 5
Name = Intel AMT
NameFormat = Other
OperationalStatus = 0
RequestedState = 12
-----------------------------------------------------------------------------------------------------------------------

So I got the CIM_ComputerSystem which represents Intel AMT. The second block of the result ist the
CIM_ComputerSystem, which represents Intel AMT.

And now?

Now the manual says that the next step that must be done is:

>> 2. From the CIM_ComputerSystem instance, traverse the CIM_HostedAccessPoint association class to find the instance of AMT_TLSProtocolEndpoint. <<



1. But how can this step be done with WinRM?

2. Does anybody know a link to WinRM samples, which performs such configurations?




Thanks in advance for your help.

0 Kudos
1 Reply
Andrew_S_Intel2
Employee
402 Views

Out of curiousity, why are you attempting to do this with WinRM at the command line instead of building off of the examples in the SDK? They can be configured to use WinRM instead of the DotNetWSman client provided in the library, if you would like. It'd be a lot easier than trying to build the requests directly at the command line with WinRM. In my previous response to your question about how you could load certificates (here: http://software.intel.com/en-us/forums/showthread.php?t=77240 ), I listed some of the other mechanisms you could use to help build the calls. The flow you described has an SDK sample listed at the bottom (it's in the Windows\Intel_AMT\Samples\WS-Management\GeneralInfo directory in the SDK), as a starting point.

I'd recommend looking at that code instead of trying to implement with WinRM at the command line.

0 Kudos
Reply