112 lines
4.6 KiB
Plaintext

// Copyright (c) 2007-2010, Intel Corporation. All rights reserved.
[Version ( "6.0.0" ),
Description (
"A AMT_EndpointAccessControlService is a Logical Element that "
"contains the information necessary to represent and manage the "
"functionality provided by a the Endpoint Access Control "
"manager of Intel(R) AMT." )]
class AMT_EndpointAccessControlService : CIM_Service {
[Description (
"This method returns (and optionally updates) the EAC "
"posture for the Intel(R) AMT device." ),
ValueMap { "0", "1", "36", "2072" },
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
"PT_STATUS_INVALID_PARAMETER", "PT_STATUS_NO_ASSOCIATION" }]
uint32 GetPosture(
[Required, IN, Description (
"The posture type to be generated." ),
ValueMap { "0" },
Values { "Attribute-Value pair (AVP) type" }]
uint16 PostureType,
[OUT, Description (
"BLOB representation of a Signed NAC Posture data block."
),
OctetString]
uint8 SignedPosture[2500],
[OUT, Description (
"A computed hash value over the posture data "
"(fields like current time is omitted). This hash "
"can be used to check if the posture was changed, "
"comparing to the last computed hash value." ),
OctetString]
uint8 PostureChangeHash[48]);
[Description (
"This method returns an hash of the currently available "
"posture for the Intel(R) AMT device, which can be "
"compared to hash values from previous results to detect "
"differences." ),
ValueMap { "0", "1", "36", "2072" },
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
"PT_STATUS_INVALID_PARAMETER", "PT_STATUS_NO_ASSOCIATION" }]
uint32 GetPostureHash(
[Required, IN, Description (
"The posture type to be generated." ),
ValueMap { "0" },
Values { "Attribute-Value pair (AVP) type" }]
uint16 PostureType,
[OUT, Description (
"A computed hash value over the posture data "
"(fields like current time is omitted). This hash "
"can be used to check if the posture was changed, "
"comparing to the last computed hash value." ),
OctetString]
uint8 PostureChangeHash[48]);
[Description (
"This command tells the Intel AMT device to reset its boot "
"counters and Agent Presence state counters."
),
ValueMap { "0", "1", "36", "2075" },
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
"PT_STATUS_INVALID_PARAMETER", "PT_STATUS_AUDIT_FAIL" }]
uint32 UpdatePostureState(
[Required, IN, Description (
"The posture element to be updated." ),
ValueMap { "0", "1" },
Values { "PostureUpdateBootCounters",
"PostureUpdateAgentPresenceState" }]
uint16 UpdateType);
[Description (
"This method returns EAC options for the Intel(R) AMT device."
),
ValueMap { "0", "1" },
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR" }]
uint32 GetEacOptions(
[OUT, Description ( "Enabled EAC Vendors" ),
ValueMap { "1", "2", "3", "4..65535" },
values { "EAC NAC", "EAC NAP", "EAC NAC and NAP",
"Reserved" }]
uint32 EacVendors,
[OUT, Description ( "Posture Hash Type" ),
ValueMap { "1", "2", "3", "4..65535" },
values { "SHA-1-160", "SHA-2-256", "SHA-2-384",
"Reserved" }]
uint32 PostureHashAlgorithm);
[Description (
"This method configures EAC options for the Intel(R) AMT device."
),
ValueMap { "0", "1", "36", "38", "2066", "2075" },
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
"PT_STATUS_INVALID_PARAMETER",
"PT_STATUS_FLASH_WRITE_LIMIT_EXCEEDED",
"PT_STATUS_UNSUPPORTED",
"PT_STATUS_AUDIT_FAIL" }]
uint32 SetEacOptions(
[Required, IN, Description ( "Enabled EAC Vendors" ),
ValueMap { "1", "2", "3", "4..65535" },
values { "EAC NAC", "EAC NAP", "EAC NAC and NAP",
"Reserved" }]
uint32 EacVendors,
[Required, IN, Description ( "Posture Hash Method" ),
ValueMap { "1", "2", "3", "4..65535" },
values { "SHA-1-160", "SHA-2-256", "SHA-2-384",
"Reserved" }]
uint32 PostureHashAlgorithm);
};