AMT Management Cert 4096-bit key lengths - which versions?

Shaw Mar 28, 2012 6:28 PM

Currently Being Moderated

Hi,

I have seen references (such as in this thread) which indicate that some versions of AMT support 4096-bit public keys in the management certificate trust path. However I am unable to find any official documentation stating that this is the case, our outlining the versions in which this functionality became available.

Does anyone know where I can find this information? Help would be very much appreciated.

Cheers,

Shaw

1. Re: AMT Management Cert 4096-bit key lengths - which versions?

Josh Copeland Apr 2, 2012 10:24 AM (in response to Shaw)

Currently Being Moderated

Hi Shaw,
I will find out what versions support the 4096 bit keys and let you know.

thanks!
Josh
Report Abuse

Like (0)

Reply
2. Re: AMT Management Cert 4096-bit key lengths - which versions?

Shaw Apr 2, 2012 5:58 PM (in response to Josh Copeland)

Currently Being Moderated

Thanks Josh, that would be great.

Cheers,
Shaw
Report Abuse

Like (0)

Reply
3. Re: AMT Management Cert 4096-bit key lengths - which versions?

Josh Copeland Apr 5, 2012 7:46 AM (in response to Shaw)

Currently Being Moderated

Hi Shaw,
I am still working to get a good Matrix of Cert size support, but in the meantime:

The latest versions of Intel AMT firmware (2.2.10, 2.6.20, 3.2.10, 4.2.0, 5.1.10, 6.0 or later) support 4096-bit key length for root and intermediate certificates.
The last certificate in the chain, the certificate stored in the Intel AMT certificate store, must have a 2048-bit key length.
The root certificate cannot exceed a length of 1500 bytes.

Again, I will try and get a matrix that shows this info.

hope this helps!
Josh
Report Abuse

Like (0)

Reply
4. Re: AMT Management Cert 4096-bit key lengths - which versions?

Shaw Apr 10, 2012 9:23 AM (in response to Josh Copeland)

Currently Being Moderated

Thanks very much Josh. It's good to have some certainty that the latest AMT versions do support the 4096-bit keys.

The matrix you are working on will be helpful as well in planning the effort required to upgrade our PC fleet to compatible AMT versions.

Cheers,
Shaw
Report Abuse

Like (0)

Reply
5. Re: AMT Management Cert 4096-bit key lengths - which versions?

Shaw May 2, 2012 8:12 AM (in response to Shaw)

Currently Being Moderated

Hi Josh,

Did you have any luck putting that Matrix together?

Regards,
Shaw
Report Abuse

Like (0)

Reply
6. Re: AMT Management Cert 4096-bit key lengths - which versions?

David Dec 20, 2012 3:59 PM (in response to Shaw)

Currently Being Moderated

(bump)

Would love to see that matrix . . . .
Like (0)

Reply

Go to original post Reply to original post

AMT Management Cert 4096-bit key lengths - which versions?

1. Re: AMT Management Cert 4096-bit key lengths - which versions?

2. Re: AMT Management Cert 4096-bit key lengths - which versions?

3. Re: AMT Management Cert 4096-bit key lengths - which versions?

4. Re: AMT Management Cert 4096-bit key lengths - which versions?

5. Re: AMT Management Cert 4096-bit key lengths - which versions?

6. Re: AMT Management Cert 4096-bit key lengths - which versions?

Actions

More Like This