Visible to Intel only — GUID: GUID-9B015626-AE3B-439D-92B8-82787E41D95B
Visible to Intel only — GUID: GUID-9B015626-AE3B-439D-92B8-82787E41D95B
Trusted Application Fields Required Properties
The following are required manifest fields. Without these fields filled in correctly, a trusted application cannot be signed.
Field name | Field Type | Field Format | Description | Available to host | Supported Since |
firmware.min_version | Version | Form: (major.minor.hotfix.build) major/minor/hotfix are decimal numbers in [0,999] (max chars length is 3) Build is decimal number in [2000,9999] (chars length is 4). Those numbers may contain leading zeros (e.g. 1.01.5.2000) |
Specifies the minimal firmware version the applet is allowed to be installed on. The build version is used internally by the Intel signing server which signs applets for use on production platforms. It has no real impact on pre-production applets. Removed in API level 7 (Intel® Management Engine (Intel® ME) 11.0) to support sign once capability. |
Yes | > Intel ME 7.x |
applet.id | UUID/GUID | String of the following format: [8 digits]-[4 digits]-[4 digits]-[4 digits]-[12 digits] where a digit is a char in [0-9,A-F,a-f] |
This field determines the globally unique identifier for the applet. This ID must be maintained for the applet across versions/platforms. | Yes | Intel ME 7.x |
applet.name | String | 1 <= charLength < 80 | A descriptive name for the applet | Yes | Intel ME 7.x |
applet.vendor | String | 1 <= charLength < 80 | A descriptive name for the applet vendor | Yes | Intel ME 7.x |
applet.version | Version | Form: <major>.<minor> major/minor are decimal numbers in [0,255] (max chars length is 3). Those numbers may contain leading zeros (e.g. 06.00) |
The version of the applet. Applet versions can be upgraded/downgraded. | Yes | Intel ME 7.x |
security.version | Decimal Integer | The security version of the applet. Should only be increased in case of a security bug in the applet that exposes platform/product secrets. Once an applet with a certain security version is installed, an applet with a lower security version will be rejected | Yes | Intel ME 7.x | |
applet.heap.size | Decimal Integer | The heap size allocated for an applet instance in bytes | No | Intel ME 7.x | |
applet.platform | String | Supported values: ME, SEC or CSE. Note: The string must be in CAPITAL letters. |
Specifies the platform the applet is allowed to be installed on. An applet must be signed for a specific platform type and can't load on different ones unless re-signed. | Yes | Intel ME 8.x, Intel® Trusted Execution Engine (Intel® TXE) 1.x |
applet.api.level | Integer | Specifies the minimum API level that the platform requires. | Yes | Intel ME 10.0 | |
applet.access.control | Integer | See Access Control section below | Specifies the Java* classes and packages that the applet is allowed to use. | No | Intel ME 11.0 |