Provisioning Methods
There are three methods of provisioning a system with Enterprise mode:
Legacy
•
IT TLS-PSK
•
•
OEM TLS-PSK
Legacy
Legacy method of AMT Setup and Configuration should be executed on an isolated
network separate from the corporate network if TLS is desired. An S&CS server
would have to have a secondary network connection to Certification Authority for
TLS configuration.
Legacy AMT Setup and Configuration is done by the customer. The customer
initially receives systems in the Factory phase with AMT disabled. These systems
will need to go through AMT Setup to go from Factory to In-Setup phase.
Once the system is in In-Setup phase, the system can continue to be configured
manually or be connected to a network where it will connect with an S&CS and
begin Enterprise Mode – AMT Configuration.
The Legacy method places all of the work of AMT Setup and Configuration on the
customer. It is no touch for the OEM.
IT TLS-PSK
IT TLS-PSK AMT Setup and Configuration is usually done in the IT department of a
corporation.
The following is needed:
Setup and Configuration Server
•
•
Network and security infrastructure
AMT systems in the Factory phase will be given to the IT department of a company.
The IT department is responsible for AMT Setup and Configuration. The IT
department is free to use any method to enter in AMT Setup information. Once this
is done, the systems will be in Enterprise mode and in the In-Setup phase. An
S&CS will need to generate PID and PPS sets.
AMT Configuration has to occur over a network. The network can be encrypted via
Transport Layer Security Pre-Shared Key (TLS-PSK) protocol. Once the systems
connect to an S&CS, Enterprise mode Configuration will occur.
The IT TLS-PSK method places the work of AMT Setup and Configuration on the IT
departments of major corporations. They must have the personnel and
infrastructure in place for system configuration and deployment. It is no touch for
the OEM.
36
Imprimir página