How to Encrypt/Decrypt Intel® Setup and Configuration Software (Intel® SCS) Profile Files for Use in Intel® Active Management Technology (Intel® AMT) Remote Configuration

Documentation

Install & Setup

000020973

02/12/2020

Configuration profiles created in Intel® Setup and Configuration Software (Intel® SCS) contain passwords and other data about your IT environment. For certain configuration actions, you may want to export an Intel SCS configuration profile, which creates an XML file of the profile data. Use the procedures below to encrypt and decrypt files.

How do I encrypt files?
Use SHA-256 on the password to create a Hash of 32 bytes:

  1. Generate the Hash with the following CMD command:
    echo | set /p=| openssl.exe dgst -sha256 -hex
  2. Run the following command to encrypt the file:
    openssl aes-128-cbc -e -in -out -K -iv -nosalt
     
    Note When encrypting additional XML files, you must use the same password that was used to encrypt the exported profile.


Intel SCS comes with a utility, SCSEncryption.exe, which performs the encryption procedure described above.

How do I decrypt files?
Run the following command to decrypt the file:

openssl aes-128-cbc -d -in -out -K -iv -nosalt