Intel AMT, vPRO HTTPS support

[mkoch]

A quick question. From which version of Intel AMT or vPro is it possible to access the remote management with HTTPS (encrypted)?

[Arun_Intel1 · Accepted solution]

Hi Mkoch,

Greetings!

Please be informed that 16992-16993 port changes were implemented with Core 13th gen processors and 12gen after a BIOS update.

Hence the port 16993 is the one that is open.

Please find the same in the below given note and the link provided.

Starting from Alder Lake platforms with Raptor Lake CPUs running Intel CSME 16.1 firmware, 

remote connections to Intel AMT unsecure TCP/IP ports 16992, 16994 and 623 are no longer supported.

TLS ports 16993, 16995 and 664 must be used for connecting to Intel AMT.

Starting from Intel CSME 19 firmware on Arrow Lake platforms, connecting to Intel AMT without TLS is not supported at all (i.e., also local connections must use TLS ports).

https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments%2Fintelamtandsecurityconsiderations1.htm

Best Regards

Arun_Intel

[mkoch]

So with  CPU Gen 12 and AMT 16 it is possible to use TLS?

And with beginning of Gen 13 it is the default.

[Arun_Intel1]

Hi MKoch,

Greetings!

To answer your query, by default, Intel® Core 13th gen processors support secure TLS connections only.

Gen 12, after a BIOS update, only TLS is supported.

Older processor versions support non-TLS and TLS connections (at least higher than 7th gen).

Best Regards

Arun_Intel

[mkoch]

Hi Arun_Intel,

thank you, that answers my question completely.

[Arun_Intel1]

Hi NKock,

Greetings!

Glad that we were answer your query, and please feel free to contact us going forward for any further query, we are more than happy to assist you!

We shall proceed to close this case.

Best Regards

Arun_Intel