Intel Communities: Message List - AMT Management Cert 4096-bit key lengths - which versions?

Re: AMT Management Cert 4096-bit key lengths - which versions?

david_beveridge@mcafee.bom — Thu, 20 Dec 2012 22:59:51 GMT

(bump)

Would love to see that matrix . . . .

Re: AMT Management Cert 4096-bit key lengths - which versions?

webadmin@intel.com — Tue, 01 May 2012 23:50:26 GMT

Hi Josh,

Did you have any luck putting that Matrix together?

Regards,

Shaw

Re: AMT Management Cert 4096-bit key lengths - which versions?

webadmin@intel.com — Tue, 10 Apr 2012 01:27:59 GMT

Thanks very much Josh. It's good to have some certainty that the latest AMT versions do support the 4096-bit keys.

The matrix you are working on will be helpful as well in planning the effort required to upgrade our PC fleet to compatible AMT versions.

Cheers,

Shaw

Re: AMT Management Cert 4096-bit key lengths - which versions?

webadmin@intel.com — Wed, 04 Apr 2012 23:02:30 GMT

Hi Shaw,

I am still working to get a good Matrix of Cert size support, but in the meantime:

The latest versions of Intel AMT firmware (2.2.10, 2.6.20, 3.2.10, 4.2.0, 5.1.10, 6.0 or later) support 4096-bit key length for root and intermediate certificates.

The last certificate in the chain, the certificate stored in the Intel AMT certificate store, must have a 2048-bit key length.

The root certificate cannot exceed a length of 1500 bytes.

Again, I will try and get a matrix that shows this info.

hope this helps!

Josh

Re: AMT Management Cert 4096-bit key lengths - which versions?

webadmin@intel.com — Mon, 02 Apr 2012 23:01:25 GMT

Thanks Josh, that would be great.

Cheers,

Shaw

Re: AMT Management Cert 4096-bit key lengths - which versions?

webadmin@intel.com — Fri, 30 Mar 2012 16:01:13 GMT

Hi Shaw,

I will find out what versions support the 4096 bit keys and let you know.

thanks!
Josh

AMT Management Cert 4096-bit key lengths - which versions?

webadmin@intel.com — Thu, 29 Mar 2012 00:28:34 GMT

Hi,

I have seen references (such as in this thread) which indicate that some versions of AMT support 4096-bit public keys in the management certificate trust path. However I am unable to find any official documentation stating that this is the case, our outlining the versions in which this functionality became available.

Does anyone know where I can find this information? Help would be very much appreciated.

Cheers,

Shaw