Intel® vPro™ Platform
Intel Manageability Forum (Intel® EMA, AMT, SCS & Manageability Commander)
Announcements
Intel® Endpoint Management Assistant (Intel® EMA) Cloud Start Tool for Azure* 2.0 is now available for download here.

The Intel® Manageability Commander 2.2 has been released! Learn more here.

The Intel® Endpoint Management Assistant, version 1.6.0 is now available for download here.

The Intel® Setup and Configuration Software tool will End of Life (EOL) on 12/31/2022. The Intel® Setup and Configuration Software Download will be available until March 31, 2021. For details, Please click here.
2565 Discussions

Vpro on intranet FQDN

ayako2
Beginner
1,806 Views

You know - luckyregister.com/support/article.php?aid=6935&locale=en

So how can i use vpro in intranet if i have FQDN of sccm like this sccm.moscow.mycompany.holding? Godaddy (or others) can't give me cert on this fqdn.

0 Kudos
4 Replies
Alan_A_Intel
Employee
111 Views

bulka,

There are a few options available to you when using a local domain.

  1. Create your own internal provisioning certificate, and then manually input the certificate hash into the MEBx of each computer.
  2. Configure your vPro computers with USB provisioning.
  3. Configure your vPro computers with Host-based configuration.
ayako2
Beginner
111 Views

Alan, thanks!

I know all of them (provision methods), but i want full automated one (cert from root CA).

May be there are some workarounds?

This methods, like entering hash, usb and host-based are good when you have a few computers. I have half thousand...

Alan_A_Intel
Employee
111 Views

I understand your desire for a fully automated process for inserting your internally created certificate hash into the MEBx. However, due to security concerns automating this process is not an option.

That said, certain OEMs have been known to work with customers on a case by case basis. Creating a custom BIOS that would come pre-populated with your internally created certificate hash.

idata
Community Manager
111 Views

I was able to get a trial ssl certificate from Verisign(Symantec). I use an internal domain called somethingsomething.loc. I haven't tested it out yet.

Reply