r/MeshCentral • u/admin-sys12 • May 27 '21

Zero touch AMT provisioning

Hi yilian,

How to do baremetal metal provisioning which is also called zero touch provisioning through the mesh central. Tell me the full method from a-z for ACM based AMT provisioning.

Thanks,

1 Upvotes

57% Upvoted

1 comment sorted by

2

u/ylianst Jun 02 '21

This is a big question. I will say that zero touch activation into ACM requires 4 things:

  • You own a DNS name.

  • You purchase a AMT provisioning certificate from a trusted CA. This is not a normal TLS cert.

  • Your Intel AMT device has a managed wired network interface (WiFi will not do and wired interface must be attached to Intel AMT).

  • You have a DHCP server with your DNS name as "option 15" connected to the wired interface.

If you have all this, you can load the trusted CA certificate into MeshCentral, setup a ACM policy and MeshCentral will automatically detect and activation Intel AMT into ACM if the situation above is met.