Vpro, AMT, Intel ME, Disable Consent

[BSawy]

Is there a way to disable the consent feature for all of my vPro capable machines in my environment?

I have a Dell KACE appliance that I am using to push out the configuration xml file using the following command;

ACUConfig.exe /Output File vProConfigLog.txt ConfigAMT "AMTSettings.xml" /DecryptionPassword mailto:P@ssw0rd123 xxxxxxxxxx

This allows me to connect to my client PC's using VNC Plus directly from the KBOX, but I can't figure out how to disable the consent code remotely.

Maybe this is just not possible?

I created the xml file using the ACU wizard, but I see no option to change or disable user consent/Opt-In settings.

As far as I can tell the only way to disable this is to use a USB key for configuring KVM.

[Bruno_Domignues]

Hi,

Using Host Based Configuration (aka. HBC), you can't suppress user consent, it's by design and due security reasons. However if you provision these machines using PKI, you can define if you want or not the User Consent.

Best Regards!

-Bruno Domingues