Intel® vPro™ Platform
Intel Manageability Forum (Intel® EMA, AMT, SCS & Manageability Commander)
Announcements
Intel® Endpoint Management Assistant (Intel® EMA) Cloud Start Tool for Azure* 2.0 is now available for download here.

The Intel® Manageability Commander 2.2 has been released! Learn more here.

The Intel® Endpoint Management Assistant, version 1.5.1 is now available for download here.

The Intel® Setup and Configuration Software tool will End of Life (EOL) on 12/31/2022. The Intel® Setup and Configuration Software Download will be available until March 31, 2021. For details, Please click here.
2562 Discussions

Intel AMT - Register PKI DNS Suffix and Root CA on unprovisioned devices

Horgster
New Contributor I
814 Views

Hi!

Is there anyone who has an tip on how we can register "PKI DNS Suffix" and Root CA thumbprint for devices that is not yet provisioned programmatic?

We need to have an tool that can set this programmatically without doing it manually by IT-personnel.

Scenario for this usage is during SCCM OS Deployment to prepare the Intel AMT device for provisioning with Intel EMA.

Any one has an idea on how this can be carried out without the need to enter the Intel MBEx BIOS manually?

Thanks
Best Regards
Horgster

0 Kudos
4 Replies
MarcinW
Beginner
709 Views

Hello I have the same question . Any ideas? 

Zieri__Sascha
Beginner
573 Views

Hi

You can use the USBFile.exe to make a BIN file. If placed on an USB Stick and activated in Bios you can configure Digest Password, Certificate or PKI DNS Suffix with booting from the USB Stick.

This was part of AMT_SDK_12.0.0.9 - I don't know where you can get it now but attached it with the sample BAT.

Greetings

Sascha

 

 

Zieri__Sascha
Beginner
568 Views

Sorry - Recognized that finally a new Version of the USBFile.exe is available with the Version 15 SDK probably better download that and use it.

Intel® Active Management Technology SDK

Greetings

Sascha

MarcinW
Beginner
523 Views

thank you for the info. I will try it. 

Reply