Lenovo ThinkCentre M92p Configuration Manual page 25

Set PID and PPS
Delete PID and PPS
TLS PKI
Select TLS PKI and press Enter. The INTEL(R) REMOTE CONFIGURATION window opens. The Remote
Configuration option is used to enable or disable the remote configuration. Enabling or disabling remote
configuration will cause a partial unprovision if the setup and configuration server is In Process. When the
Remote Configuration option is enabled, the following options will be displayed.
PKI DNS Suffix
Manage Hashes
Chapter 4
Option
Option
.
Intel AMT setup and configuration on Lenovo ThinkCentre M92/p and M92z desktop computers
Description
Used to enter the Provisioning ID (PID) and Provisioning
Pre-shared Key (PPS). The PID and PPS should be entered
in the dash format (for example, 1234-ABCD for PID and
1234-ABCD-1234-ABCD-1234- ABCD-1234-ABCD for
PPS).
Notes:
1. A PPS value of
0000-0000-0000-0000-0000-0000-0000-0000 will
not change the setup configuration state. If this
value is used, the setup and configuration state will
stay as Not-started.
2. Setting the PID/PPS will cause a partial unprovision if
the setup and configuration is In-process.
Used to delete the current PID and PPS stored on the
Intel ME.
Note: Deleting the PID and PPS will cause a partial
unprovision if the setup and configuration is In-process.
Description
Used to enter the PKI DNS Suffix for your Intel AMT
computer. Key value will be maintained in the EPS.
Note: EPS stands for VA Private Store, which is Intel's VA
Specific Store in an ME-owned flash area separate from
3PDS. The size is one (1) physical page (4K bytes).
Used to list all the hashes on the system, including the
hash names and the hash states. The following keys are
used to manage the hashes:
• Esc: Used to exit from the hash management window.
• Insert: Used to add a customized certificate hash to
the system. To add a new certificate hash, do the
following:
1. Press Insert and type the new hash name.
Note: The hash name must be no longer than 32
characters.
2. Enter the certificate hash data for Intel AMT when
prompted. The Certificate hash data is a 20-byte
hexadecimal number for SHA-1 and a 32-byte for
SHA-2. Enter the hash data in the correct format
and then press Enter.
Note:
You can choose which hash algorithm will be used.
a. SHA1
b. SHA2-256
c. SHA2-384
17