Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide
13
Step 4C-2: Create PID-PPS security keys in SCS. Before you can configure the PID-PPS
information on the Intel vPro clients, you need to generate that information in the SCS console.
To create TLS-PSK security keys in SCS, do the following:
1.
In the Advanced element, right-click TLS-PSK Configuration Keys and choose Add Security
Keys. The Security Key Settings window opens.
2.
Specify the following information where applicable:
o
Number of keys to store: The number of keys that you want to create (up to 1024 keys)
o
Manufacturing default MEBx password: the MEBx password that was entered in the
firmware by the manufacturer.
o
New MEBx Password: Choose the type of new MEBx password:
Fixed Password: To use the same password with all the keys, choose this and
enter the password that you want to use.
3.
Click OK. The Intel SCS creates a list of Security Keys. See the MEBx Settings pane to
configure the number of keys generated. Each record consists of an 8 byte PID, a 32 byte PPS
and the administrator’s password.
Step 4C-3: Configure Intel vPro Clients Using a USB Thumb Drive: In this method, the new
password and the PID/PPS keys are exported from the management console onto a USB thumb drive.
To export the list of keys to a USB drive:
1.
Attach a USB drive to a USB port on the server on which the Console is running.
2.
In the Advanced element, right-click TLS-PSK Configuration Keys and choose Export Keys to
USB Drive.
3.
In the USB Drive list, choose the drive to which you want to export the keys.
4.
To export existing keys, select the Export option. Then specify the number of keys that you
want to store on the drive (up to 1024 keys). Click
Next
to export the keys and finish this
procedure.
Note: You can only use the USB key to transfer the PID/PPS information to the Intel MEBX one time
per client system. A bit is set on the client once the transfer has been made and the client will not
allow an additional transfer to occur unless the bit is reset. To reset this bit, you would need to clear
the client Intel Management Engine by performing a Full Un-Provision in the Intel MEBX (reset to factory
defaults).