// Copyright (c) 2007-2010, Intel Corporation. All rights reserved. [Version ( "11.0.0" ), Description ( "Describes the Setup and Configuration Service, which is the " "logic in Intel(R) AMT that responds to Setup and Configuration " "requests." )] class AMT_SetupAndConfigurationService : CIM_CredentialManagementService { [Description ( "A Read-Only enumeration value that determines the " "behavior of Intel(R) AMT when it is deployed. " "Starting from Release 7.0, this enumeration indicates " "whether AMT is deployed in \"Admin control mode\" or " "\"Client control mode\". In \"Admin\" mode, AMT functionality " "is on the same level of previous releases. In \"Client\" mode " "fucntionality is limited or requires user consent."), ValueMap { "1", "..", "4", ".."}, Values { "Admin Control Mode", "Reserved1", "Client Control Mode", "Reserved2" }] uint8 ProvisioningMode; [Description ( "An enumeration value that indicates the state of the " "Intel(R) AMT subsystem in the provisioning process\"Pre\" " "- the setup operation has not started.\"In\" - the setup " "operation is in progress.\"Post\" - Intel(R) AMT is " "configured." ), ValueMap { "0", "1", "2" }, Values { "Pre", "In", "Post" }] uint8 ProvisioningState; [Description ( "Indicates if Zero Touch Configuration (Remote " "Configuration) is enabled or disabled. This property " "affects only enterprise mode. It can be modified while " "in SMB mode" )] boolean ZeroTouchConfigurationEnabled; [Description ( "A optional binary data value containing 8-32 " "characters,that represents a one-time password (OTP), " "used to authenticate the Intel(R) AMT to the " "configuration server. This property can be retrieved " "only in IN Provisioning state, nevertheless, it is " "settable also in POST provisioning state." ), OctetString] uint8 ProvisioningServerOTP[32]; [Description ( "The FQDN of the configuration server." ), MaxLen ( 255 )] string ConfigurationServerFQDN; [Description ( "An enumeration value that determines the password model " "of Intel(R) AMT." ), ValueMap { "0", "1", "2" }, Values { "Coupled password model (the password of the network and the local interfaces are identical)", "Separate password model (the password of the network and the local interfaces are separate)", "Separate-Hash password model" }] uint8 PasswordModel; [Description ( "The domain name provided by DHCP server (DHCP option 15) "), MaxLen ( 255 )] string DhcpDNSSuffix; [Description ( "The DNS suffix for provisioning purposes provided in Mebx "), MaxLen ( 255 )] string TrustedDNSSuffix; [Description ( "Commits pending configuration commands made to the " "Intel(R) AMT device. Completes configuration when in " "\"IN-provisioning\" state" ), ValueMap { "0", "1", "38", "2057" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "PT_STATUS_FLASH_WRITE_LIMIT_EXCEEDED", "PT_STATUS_DATA_MISSING" }] uint32 CommitChanges( ); [Description ( "Resets the Intel(R) AMT device to default factory " "settings. The device will need to be re-provisioned " "after this command." ), ValueMap { "0", "1", "16", "36", "2076" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "PT_STATUS_NOT_PERMITTED", "PT_STATUS_INVALID_PARAMETER", "PT_STATUS_BLOCKING_COMPONENT" }] uint32 Unprovision( [IN, Description ( "Indicates the provisioning mode (Enterprise , " "Small Business or Remote Connectivity) the device " "will enter following successful completion of the " "command. Starting from Release 6.0 only effective " "value is ProvisioningModeEnterprise" ), ValueMap { "0", "1", "2", "3" }, Values { "ProvisioningModeCurrent", "ProvisioningModeEnterprise", "ProvisioningModeSmallBusiness", "ProvisioningRemoteConnectivity" }] uint32 ProvisioningMode); [Description ( "Transfers Intel(R) AMT into a partially-unprovisioned " "state: Except for configuration settings required for " "the next provisioning: Admin ACL settings, TLS-PSK keys, " "Host & Domain name, and provisioning server IP and port " "number, settings will be restored to factory defaults. " "The device will need to be re-provisioned after this " "command." ), ValueMap { "0", "1", "16", "2076" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "PT_STATUS_NOT_PERMITTED", "PT_STATUS_BLOCKING_COMPONENT" }] uint32 PartialUnprovision( ); [Description ( "This method allows a configuration server to extend the " "configuration time, in which Intel(R) AMT is expected to " "be provisioned. If a configuration server does not call " "this command before the provisioning period expires, " "Intel(R) AMT will close the network interface." ), ValueMap { "0", "1", "16" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "PT_STATUS_NOT_PERMITTED" }] uint32 ExtendProvisioningPeriod( [IN, Description ( "The extension duration in hours (limited to " "maximum value of 24 in each call)." )] uint32 Duration); [Description ( "This method sets the ME Bios extension password. It " "allows a remote caller to change the ME access password " "for the BIOS extension screen. This call succeeds " "depending on the password policy rule defined in MEBx " "(BIOS extension):\"Default Password Only\" - Method " "succeeds only when the current password is still the " "default value and only in PKI provisioning. \"During " "Setup and Configuration\" - Method succeeds only during " "provisioning, regardless of provisioning method or " "previous password value.\"ANYTIME\" - Method will always " "succeed. (i.e. even when configured)" ), ValueMap { "0", "1", "16", "2054" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "PT_STATUS_NOT_PERMITTED", "PT_STATUS_INVALID_PASSWORD" }] uint32 SetMEBxPassword( [IN, Description ( "Password needs to be strong: Contain at least one " "of: upper-case, lower-case, digit and special " "character" ), MinLen ( 8 ), MaxLen ( 32 )] string Password); [Description ( "This method returns the Universal Unique ID of the " "platform (UUID)." ), ValueMap { "0", "1" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR" }] uint32 GetUuid( [OUT, Description ( "UUID of the system. If the value is all FFh, the " "ID is not currently present in the system, but is " "settable. If the value is all 00h, the ID is not " "present in the system. Corresponds to the UUID " "field of the SMBIOS Type 1 structure" ), OctetString] uint8 UUID[16]); [Description ( "This command returns the components that caused the last " "unprovisioning (full or partial) request to fail with " "the PT_STATUS_BLOCKING_COMPONENT error." ), ValueMap { "0", "1", "2..65535" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "Reserved" }] uint32 GetUnprovisionBlockingComponents( [Required, OUT, Description ( "components that caused the last unprovisioning " "(full or partial) request to fail" ), ValueMap { "1", "2..65535" }, Values { "COMPONENT_AUDIT_LOG", "Reserved" }] uint32 Component[]); };