Lenovo ThinkCentre M90p Configuration Manual page 25

Manage Hashes Used to list all the hashes on the system, including the hash names
and the hash states. The following keys are used to manage the
hashes:
v Esc: Used to exit from the hash management window.
v Insert: Used to add a customized certificate hash to the system. To
add a new certificate hash, do the following:
1. Press Insert and type the new hash name.
2. Enter the certificate hash data for Intel AMT when prompted.
3. Press Y to activate the certificate hash when prompted.
v Delete: Used to delete the currently selected certificate hash. A
certificate hash that is not active cannot be deleted.
v +: Used to change the active state of the currently selected certificate
hash. Setting a hash as active indicates that the hash is available for
use during PSK provisioning.
v Enter: Used to view the details of the currently selected certificate
hash. Press Enter in the hash management window. The details of
the selected certificate hash will be displayed, including the hash
name, certificate hash data, and the active and default states.
FW Update Settings
Select FW Update Settings and press Enter. The FW Update Settings window
opens. The following options will be displayed.
Option
Used to enable or disable the Intel ME firmware local update. When
Local FW Update
the Local FW Update function is set to ENABLED, the IT
administrator can update the Intel ME firmware locally through the
local Intel ME interface or through the local secure interface.
Note: The local firmware update does not require an administrator
user name and password. Therefore, when the local firmware update
is completed, this setting is automatically set to DISABLED by the
Intel ME firmware. You need to manually set the Local FW Update
function to ENABLED when a local update is needed.
Secure FW Used to enable or disable the secure firmware update. You need to
Update have an administrator user name and password to use the Secure
Firmware Update function. When the Secure Firmware Update
function is enabled, the IT administrator can update the firmware
securely through the Local Manageability Service (LMS) driver.
Set PRTC
Select Set PRTC in the INTEL(R) ME PLATFORM CONFIGURATION window and
press Enter. You are prompted to enter the Protected Real Time Clock (PRTC) value
in Coordinated Universal Time (UTC) format (YYYY:MM:DD:HH:MM:SS). Setting a
PRTC value helps maintain the PRTC when your computer is turned off. The valid
PRTC date ranges from January 1, 2004 to January 4, 2021.
Chapter 5. Intel AMT setup and configuration on Lenovo ThinkCentre M90p desktop computers
Note: The hash name must be no longer than 32 characters.
The Certificate hash data is a 20-byte hexadecimal number. Enter
the hash data in the correct format and then press Enter.
Description
17