196 lines
8.2 KiB
Plaintext
196 lines
8.2 KiB
Plaintext
// Copyright (c) 2007-2010, Intel Corporation. All rights reserved.
|
|
[Version ( "11.0.0" ),
|
|
Description (
|
|
"Describes the Setup and Configuration Service, which is the "
|
|
"logic in Intel(R) AMT that responds to Setup and Configuration "
|
|
"requests." )]
|
|
class AMT_SetupAndConfigurationService : CIM_CredentialManagementService {
|
|
|
|
[Description (
|
|
"A Read-Only enumeration value that determines the "
|
|
"behavior of Intel(R) AMT when it is deployed. "
|
|
"Starting from Release 7.0, this enumeration indicates "
|
|
"whether AMT is deployed in \"Admin control mode\" or "
|
|
"\"Client control mode\". In \"Admin\" mode, AMT functionality "
|
|
"is on the same level of previous releases. In \"Client\" mode "
|
|
"fucntionality is limited or requires user consent."),
|
|
ValueMap { "1", "..", "4", ".."},
|
|
Values { "Admin Control Mode", "Reserved1", "Client Control Mode", "Reserved2" }]
|
|
uint8 ProvisioningMode;
|
|
|
|
[Description (
|
|
"An enumeration value that indicates the state of the "
|
|
"Intel(R) AMT subsystem in the provisioning process\"Pre\" "
|
|
"- the setup operation has not started.\"In\" - the setup "
|
|
"operation is in progress.\"Post\" - Intel(R) AMT is "
|
|
"configured." ),
|
|
ValueMap { "0", "1", "2" },
|
|
Values { "Pre", "In", "Post" }]
|
|
uint8 ProvisioningState;
|
|
|
|
[Description (
|
|
"Indicates if Zero Touch Configuration (Remote "
|
|
"Configuration) is enabled or disabled. This property "
|
|
"affects only enterprise mode. It can be modified while "
|
|
"in SMB mode" )]
|
|
boolean ZeroTouchConfigurationEnabled;
|
|
|
|
[Description (
|
|
"A optional binary data value containing 8-32 "
|
|
"characters,that represents a one-time password (OTP), "
|
|
"used to authenticate the Intel(R) AMT to the "
|
|
"configuration server. This property can be retrieved "
|
|
"only in IN Provisioning state, nevertheless, it is "
|
|
"settable also in POST provisioning state." ),
|
|
OctetString]
|
|
uint8 ProvisioningServerOTP[32];
|
|
|
|
|
|
[Description ( "The FQDN of the configuration server." ),
|
|
MaxLen ( 255 )]
|
|
string ConfigurationServerFQDN;
|
|
|
|
[Description (
|
|
"An enumeration value that determines the password model "
|
|
"of Intel(R) AMT." ),
|
|
ValueMap { "0", "1", "2" },
|
|
Values {
|
|
"Coupled password model (the password of the network and the local interfaces are identical)",
|
|
"Separate password model (the password of the network and the local interfaces are separate)",
|
|
"Separate-Hash password model" }]
|
|
uint8 PasswordModel;
|
|
|
|
[Description (
|
|
"The domain name provided by DHCP server (DHCP option 15) "),
|
|
MaxLen ( 255 )]
|
|
string DhcpDNSSuffix;
|
|
|
|
[Description (
|
|
"The DNS suffix for provisioning purposes provided in Mebx "),
|
|
MaxLen ( 255 )]
|
|
string TrustedDNSSuffix;
|
|
|
|
|
|
[Description (
|
|
"Commits pending configuration commands made to the "
|
|
"Intel(R) AMT device. Completes configuration when in "
|
|
"\"IN-provisioning\" state" ),
|
|
ValueMap { "0", "1", "38", "2057" },
|
|
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
|
|
"PT_STATUS_FLASH_WRITE_LIMIT_EXCEEDED",
|
|
"PT_STATUS_DATA_MISSING" }]
|
|
uint32 CommitChanges(
|
|
);
|
|
|
|
[Description (
|
|
"Resets the Intel(R) AMT device to default factory "
|
|
"settings. The device will need to be re-provisioned "
|
|
"after this command." ),
|
|
ValueMap { "0", "1", "16", "36", "2076" },
|
|
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
|
|
"PT_STATUS_NOT_PERMITTED", "PT_STATUS_INVALID_PARAMETER",
|
|
"PT_STATUS_BLOCKING_COMPONENT" }]
|
|
uint32 Unprovision(
|
|
[IN, Description (
|
|
"Indicates the provisioning mode (Enterprise , "
|
|
"Small Business or Remote Connectivity) the device "
|
|
"will enter following successful completion of the "
|
|
"command. Starting from Release 6.0 only effective "
|
|
"value is ProvisioningModeEnterprise" ),
|
|
ValueMap { "0", "1", "2", "3" },
|
|
Values { "ProvisioningModeCurrent",
|
|
"ProvisioningModeEnterprise",
|
|
"ProvisioningModeSmallBusiness",
|
|
"ProvisioningRemoteConnectivity" }]
|
|
uint32 ProvisioningMode);
|
|
|
|
[Description (
|
|
"Transfers Intel(R) AMT into a partially-unprovisioned "
|
|
"state: Except for configuration settings required for "
|
|
"the next provisioning: Admin ACL settings, TLS-PSK keys, "
|
|
"Host & Domain name, and provisioning server IP and port "
|
|
"number, settings will be restored to factory defaults. "
|
|
"The device will need to be re-provisioned after this "
|
|
"command." ),
|
|
ValueMap { "0", "1", "16", "2076" },
|
|
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
|
|
"PT_STATUS_NOT_PERMITTED", "PT_STATUS_BLOCKING_COMPONENT" }]
|
|
uint32 PartialUnprovision(
|
|
);
|
|
|
|
|
|
[Description (
|
|
"This method allows a configuration server to extend the "
|
|
"configuration time, in which Intel(R) AMT is expected to "
|
|
"be provisioned. If a configuration server does not call "
|
|
"this command before the provisioning period expires, "
|
|
"Intel(R) AMT will close the network interface." ),
|
|
ValueMap { "0", "1", "16" },
|
|
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
|
|
"PT_STATUS_NOT_PERMITTED" }]
|
|
uint32 ExtendProvisioningPeriod(
|
|
[IN, Description (
|
|
"The extension duration in hours (limited to "
|
|
"maximum value of 24 in each call)." )]
|
|
uint32 Duration);
|
|
|
|
[Description (
|
|
"This method sets the ME Bios extension password. It "
|
|
"allows a remote caller to change the ME access password "
|
|
"for the BIOS extension screen. This call succeeds "
|
|
"depending on the password policy rule defined in MEBx "
|
|
"(BIOS extension):\"Default Password Only\" - Method "
|
|
"succeeds only when the current password is still the "
|
|
"default value and only in PKI provisioning. \"During "
|
|
"Setup and Configuration\" - Method succeeds only during "
|
|
"provisioning, regardless of provisioning method or "
|
|
"previous password value.\"ANYTIME\" - Method will always "
|
|
"succeed. (i.e. even when configured)" ),
|
|
ValueMap { "0", "1", "16", "2054" },
|
|
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
|
|
"PT_STATUS_NOT_PERMITTED", "PT_STATUS_INVALID_PASSWORD" }]
|
|
uint32 SetMEBxPassword(
|
|
[IN, Description (
|
|
"Password needs to be strong: Contain at least one "
|
|
"of: upper-case, lower-case, digit and special "
|
|
"character" ),
|
|
MinLen ( 8 ),
|
|
MaxLen ( 32 )]
|
|
string Password);
|
|
|
|
|
|
[Description (
|
|
"This method returns the Universal Unique ID of the "
|
|
"platform (UUID)." ),
|
|
ValueMap { "0", "1" },
|
|
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR" }]
|
|
uint32 GetUuid(
|
|
[OUT, Description (
|
|
"UUID of the system. If the value is all FFh, the "
|
|
"ID is not currently present in the system, but is "
|
|
"settable. If the value is all 00h, the ID is not "
|
|
"present in the system. Corresponds to the UUID "
|
|
"field of the SMBIOS Type 1 structure" ),
|
|
OctetString]
|
|
uint8 UUID[16]);
|
|
|
|
[Description (
|
|
"This command returns the components that caused the last "
|
|
"unprovisioning (full or partial) request to fail with "
|
|
"the PT_STATUS_BLOCKING_COMPONENT error." ),
|
|
ValueMap { "0", "1", "2..65535" },
|
|
Values { "PT_STATUS_SUCCESS", "PT_STATUS_INTERNAL_ERROR",
|
|
"Reserved" }]
|
|
uint32 GetUnprovisionBlockingComponents(
|
|
[Required, OUT, Description (
|
|
"components that caused the last unprovisioning "
|
|
"(full or partial) request to fail" ),
|
|
ValueMap { "1", "2..65535" },
|
|
Values { "COMPONENT_AUDIT_LOG", "Reserved" }]
|
|
uint32 Component[]);
|
|
|
|
|
|
|
|
|
|
};
|