// Copyright (c) 2007-2010, Intel Corporation. All rights reserved. [Version ( "6.0.0" ), Description ( "A AMT_EndpointAccessControlService is a Logical Element that " "contains the information necessary to represent and manage the " "functionality provided by a the Endpoint Access Control " "manager of Intel(R) AMT." )] class AMT_EndpointAccessControlService : CIM_Service { [Description ( "This method returns (and optionally updates) the EAC " "posture for the Intel(R) AMT device." ), ValueMap { "0", "1", "36", "2072" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "PT_STATUS_INVALID_PARAMETER", "PT_STATUS_NO_ASSOCIATION" }] uint32 GetPosture( [Required, IN, Description ( "The posture type to be generated." ), ValueMap { "0" }, Values { "Attribute-Value pair (AVP) type" }] uint16 PostureType, [OUT, Description ( "BLOB representation of a Signed NAC Posture data block." ), OctetString] uint8 SignedPosture[2500], [OUT, Description ( "A computed hash value over the posture data " "(fields like current time is omitted). This hash " "can be used to check if the posture was changed, " "comparing to the last computed hash value." ), OctetString] uint8 PostureChangeHash[48]); [Description ( "This method returns an hash of the currently available " "posture for the Intel(R) AMT device, which can be " "compared to hash values from previous results to detect " "differences." ), ValueMap { "0", "1", "36", "2072" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "PT_STATUS_INVALID_PARAMETER", "PT_STATUS_NO_ASSOCIATION" }] uint32 GetPostureHash( [Required, IN, Description ( "The posture type to be generated." ), ValueMap { "0" }, Values { "Attribute-Value pair (AVP) type" }] uint16 PostureType, [OUT, Description ( "A computed hash value over the posture data " "(fields like current time is omitted). This hash " "can be used to check if the posture was changed, " "comparing to the last computed hash value." ), OctetString] uint8 PostureChangeHash[48]); [Description ( "This command tells the Intel AMT device to reset its boot " "counters and Agent Presence state counters." ), ValueMap { "0", "1", "36", "2075" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "PT_STATUS_INVALID_PARAMETER", "PT_STATUS_AUDIT_FAIL" }] uint32 UpdatePostureState( [Required, IN, Description ( "The posture element to be updated." ), ValueMap { "0", "1" }, Values { "PostureUpdateBootCounters", "PostureUpdateAgentPresenceState" }] uint16 UpdateType); [Description ( "This method returns EAC options for the Intel(R) AMT device." ), ValueMap { "0", "1" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR" }] uint32 GetEacOptions( [OUT, Description ( "Enabled EAC Vendors" ), ValueMap { "1", "2", "3", "4..65535" }, values { "EAC NAC", "EAC NAP", "EAC NAC and NAP", "Reserved" }] uint32 EacVendors, [OUT, Description ( "Posture Hash Type" ), ValueMap { "1", "2", "3", "4..65535" }, values { "SHA-1-160", "SHA-2-256", "SHA-2-384", "Reserved" }] uint32 PostureHashAlgorithm); [Description ( "This method configures EAC options for the Intel(R) AMT device." ), ValueMap { "0", "1", "36", "38", "2066", "2075" }, Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR", "PT_STATUS_INVALID_PARAMETER", "PT_STATUS_FLASH_WRITE_LIMIT_EXCEEDED", "PT_STATUS_UNSUPPORTED", "PT_STATUS_AUDIT_FAIL" }] uint32 SetEacOptions( [Required, IN, Description ( "Enabled EAC Vendors" ), ValueMap { "1", "2", "3", "4..65535" }, values { "EAC NAC", "EAC NAP", "EAC NAC and NAP", "Reserved" }] uint32 EacVendors, [Required, IN, Description ( "Posture Hash Method" ), ValueMap { "1", "2", "3", "4..65535" }, values { "SHA-1-160", "SHA-2-256", "SHA-2-384", "Reserved" }] uint32 PostureHashAlgorithm); };