Corporate PKI Certificate for activating Intel vPro - EMA is not possible

[LeeBow55]

Hello there, we have a fleet of devices that are vPro enabled. We cannot use Intel EMA due to the segregation of our clients.

We would likely administer these devices from another Peer with the basic Web Console, or possibly MeshCommander

We are predominately use Dell devices and they provide a tool too allow USB Provisioning of the vPro agent. This requires the import of a Certificate. However there is no recent documentation from either Dell or Intel that give clarity of the Certificate requirements.

We have an Interal PKI infrastructure (AD Certificate Services) and therefore will not be purchasing a Third Party Certificate.

Could I please be provided some details on the Certificate properties required for an internal CSR

Thank you

[Suneesh]

Hello LeeBow55,

To install a digital certificate, you’ll first need to generate a Certificate Signing Request (CSR) for your Certification Authority (CA). The CSR includes your certificate application details, such as your public key. During this process, a public/private key pair is also created, which is essential for encrypting and decrypting secure transactions.

For detailed instructions, please refer to Section 4.4 – Generate a Certificate Signing Request (CSR) in the guide linked below.

https://cdrdv2-public.intel.com/840333/Intel_SCS_Deployment_Guide.pdf

If you have any questions or need further assistance, feel free to reach out.

Best regards,

Suneesh_Intel

[Suneesh]

Hello LeeBow55,

We are following up on this case. If further assistance is necessary, please do not hesitate to reply.

Regards,

Suneesh_Intel

[LeeBow55]

Thank you for following up. TBH I have not tried the Certificate process yet. This is because we were looking to utilise Intel vPro to help Power Manage and KVM some remote workstations that are racked and headless. I have since understood that intel vPro needs a monitor (or emulator) plugged into the graphics output to allow the KVM capability. Unfortuantely we cannot use something like a emulator in the display ports

[Jimmy_Wai_Intel]

Hi LeeBow55,

You may find a headless option in the BIOS of the workstation. This will make the Intel AMT KVM work without a monitor connected. Some OEMs implement this in some of their workstation models. Please check with your system and your OEMs.

Regards,

Jimmy Wai

Technical Sales Specialist, Intel

[Suneesh]

Hi LeeBow55,

Thank you for contacting Intel.

Please feel free to reach out if you have any further queries.

Regards,

Suneesh S

Intel Customer Support Technician

​​​​​​​intel.com/vPro