
34
– RCFG
Remote Configuration (RCFG) is an Intel AMT feature that allows a single OEM OS image to provision systems
securely, without the need to manually modify Intel AMT options.
RCFG has the following requirements:
• Public Key Infrastructure with Certificate Hashes (PKI-CH) protocol to maintain security
• DHCP environment
• OS present on the Intel AMT system
– Provisioning Server IPv4/IPv6
This menu item is used in Enterprise mode to point to the IP address of the SCS. The default is 0.0.0.0.
If the IP address is left at its default value, the ME will look for ProvisionServer on the DNS.
Some SCS products may require additional settings, such as the port number
10
and IP address. Contact the particular
ISV for more information.
– Provisioning Server FQDN
This menu item is used in Enterprise mode to specify the Fully Qualified Domain Name (FQDN) of the SCS, which is
network-dependent. There is no default.
– TLS PSK
Select this menu item in order to configure TLS-PSK via the Intel TLS PSK Configuration screen, shown in Figure 24.
Figure 24. Configuring TLS–PSK provisioning
Options are:
– Set PID and PPS
This option allows you to specify a provisioning ID (PID) and provisioning passphrase (PPS). Values are system-
dependent; there is no default.
Without dashes, PIDs have eight characters, while PPSs have 32 characters. Since there are dashes between every
set of four characters, PIDs have a total of 9 characters, while PPSs have a total of 40 characters. If you do not wish
to enter the PID or PPS manually, you can use a USB key that contains the appropriate information (see Using a USB
drive key for provisioning).
10
The default port for many SCSs is 9971.
Comentarios a estos manuales