The act of setting up and configuring Intel® AMT is known as provisioning. There are two methods of provisioning a computer with Enterprise mode:
Legacy
IT TLS-PSK
Legacy
If you want Transport Layer Security (TLS), execute the legacy method of Intel AMT setup and configuration on an isolated network separate from
the corporate network. A setup and configuration server (SCS) requires a secondary network connection to a certification authority (an
entity which issues digital certificates) for TLS configuration.
Initially the computers are shipped in the factory-default state with Intel AMT ready for configuration and provisioning. These computers
must go through Intel AMT setup in order to go from the factory-default state to the setup state. Once the computer is in the setup state,
you can continue to configure it manually or connect it to a network where it connects with an SCS and begin Enterprise Mode Intel AMT
configuration.
IT TLS-PSK
IT TLS-PSK Intel AMT setup and configuration is usually performed in a company's IT department. The following are required:
Setup and configuration server
Network and security infrastructure
Intel AMT capable computers in the factory-default state are given to the IT department, which is responsible for Intel AMT setup and
configuration. The IT department can use any method to input Intel AMT setup information, after which the computers are in Enterprise Mode
and in the In-Setup phase. An SCS must generate PID and PPS sets.
Intel AMT configuration must occur over a network. The network can be encrypted using the Transport Layer Security Pre-Shared Key (TLS-PSK)
protocol. Once the computers connect to an SCS, Enterprise Mode Configuration occurs.
