Intel vPro Processor Technology Setup and Configuration for the HP Z1, Z210, Z420, Z620 and Z820 Workstations
29 
Provisioning Methods 
There are three methods of provisioning a system with Enterprise mode: 
•  Legacy 
•  IT TLS-PSK 
•  OEM TLS-PSK 
Legacy 
Legacy method of AMT Setup and Configuration should be executed on an isolated 
network separate from the corporate network if TLS is desired. An S&CS server 
would have to have a secondary network connection to Certification Authority for 
TLS configuration. 
Legacy AMT Setup and Configuration is done by the customer. The customer 
initially receives systems in the Factory phase with AMT disabled. These systems 
will need to go through AMT Setup to go from Factory to In-Setup phase. 
Once the system is in In-Setup phase, the system can continue to be configured 
manually or be connected to a network where it will connect with an S&CS and 
begin Enterprise Mode – AMT Configuration. 
The Legacy method places all of the work of AMT Setup and Configuration on the 
customer. It is no touch for the OEM. 
IT TLS-PSK 
IT TLS-PSK AMT Setup and Configuration is usually done in the IT department of a 
corporation. 
The following is needed: 
•  Setup and Configuration Server 
•  Network and security infrastructure 
AMT systems in the Factory phase will be given to the IT department of a company. 
The IT department is responsible for AMT Setup and Configuration. The IT 
department is free to use any method to enter in AMT Setup information. Once this 
is done, the systems will be in Enterprise mode and in the In-Setup phase. An 
S&CS will need to generate PID and PPS sets. 
AMT Configuration has to occur over a network. The network can be encrypted via 
Transport Layer Security Pre-Shared Key (TLS-PSK) protocol. Once the systems 
connect to an S&CS, Enterprise mode Configuration will occur. 
The IT TLS-PSK method places the work of AMT Setup and Configuration on the IT 
departments of major corporations. They must have the personnel and infrastructure 
in place for system configuration and deployment. It is no touch for the OEM 










