Lenovo ThinkCentre M58p Manual page 23

Note: A PPS value of '0000-0000-0000-0000-0000-0000-0000-0000' will not
change the setup configuration state. If this value is used, the setup
and configuration state will stay as Not-started.
– Delete PID and PPS – Delete the current PID and PPS stored in Intel ME.
Note: Using this option will set the setup and configuration process
parameter to In Process.
v TLS PKI: This menu contains options for the TLS PKI configuration settings.
Select TLS PKI. The TLS PKI setting menu displays.
Note: This option is also only needed for Enterprise mode. If you choose SMB
mode, you need not to enter this option button.
The Remote configuration options are contained under the TLS PKI submenu.
There are four remote configuration items:
– Remote Configuration Enable/Disable
Remote Configuration = Enabled: To enable remote configuration.
Remote Configuration = Disabled: Remote configuration cannot occur. The
menu options will be displayed, but cannot be used until remote
configuration is enabled.
Note: This option cannot be modified once the setup and configuration
procedure is in process. This parameter can only be modified while the
system is in unprovisioned state. Enabling/Disabling Remote
configuration will cause a partial unprovision if the setup and
configuration is "In-process".
– Manage Certificate Hashes
Select Manage Certificate Hashes option, the manage certificate hashes menu
displays. This option will enable you to enumerate the hashes in the system,
and display the Hash Name, the active and default state.
The manage certificate hashes screen has several keyboard controls available
to the user to manage the hashes on the system. These keys are valid in the
Manage Certificate Hashes menu and listed below:
- [ESC] – To exit from the menu
- [INS] – To add a customized certificate hash to the system. Press [INS], and
type the hash name.
The hash name must be a maximum of 32 characters. The Certificate hash
value is a 20 byte hexadecimal number. The user must enter the hash data
in the correct format. Otherwise, the message prompts, indicating Invalid
Hash Certificate Entered - Try Again
Upon pressing Enter the user is asked about setting the active state of the
hash. This query allows for setting the active state of the customized hash.
v Yes – The customized hash will be marked as active.
v No (Default) – VA_Hash will be maintained within EPS
- [DEL] – To delete the currently selected certificate hash from system. Press
[DEL]
v Yes – MEBx will send the message to FW to delete the selected hash.
v No – MEBx will not delete the selected hash and will return to the
remote configuration.
- [+] To change the active state of the currently selected certificate hash. Press
+ in the Manage Certificate Hash screen, and Yes will toggle the active
Chapter 5. Intel AMT setup and configuration based on Lenovo ThinkCentre M58p
15