Return
-
Title
How to deploy (Intel SA 00086 detection vulnerability tool) to KACE Agents and retrieve the output from the inventory. -
Description
Recently, Intel release the Intel Management Engine Critical Firmware update (SA-00086) vulnerability detection tool
The tool can be deployed to target machine and input result into the registry record
-
Cause
Security Vulnerabilities found in the Intel® Management Engine Firmware and in response to issues identified by external researchers, Intel has performed an in-depth comprehensive security review of the following with the objective of enhancing firmware resilience:- Intel® Management Engine (Intel® ME)
- Intel® Trusted Execution Engine (Intel® TXE)
- Intel® Server Platform Services (SPS)
- Intel has identified security vulnerabilities that could potentially impact certain PCs, servers, and IoT platforms.
-
Resolution
How do we install the tool in bulk and retrieve the registry record into the Inventory?
Step 1: Download SA00086_Windows.zip file from Intel website
- Refer to Intel-SA-00086_Detection_UG.pdf file for more details and command switches
- Unzip and extract the SA00086_Windows.zip to your local admin machine’s folder
- Try to locate the following files: Intel-SA-00086-console.exe
Step 2: Create a KScript
1. Upload the Intel-SA-00086-console.exe as a Dependencies file.2. Create a “On Success” task by specifying- Directory: SYS
- File: cmd.ext
- [x] Wait for startup
- Parameters: "$(KACE_DEPENDENCY_DIR)\Intel-SA-00086-console.exe -f sa00086results.xml -p c:\SA00086_Windows\"
Step 3: Create a CIR - Custom Inventory Rule
Go to Inventory | Software- Choose Action -> Add New Item
- Enter a Display Name:
- Under Labels, Notes and Operating Systems | Supported Operating Systems -> Select the OS.
- On Custom Inventory Rule -> please enter - ShellCommandTextReturn(cmd.exe /c type c:\sa00086results.xml)
- Click on Save
Step 4: CIR Results:Go to Inventory | Computers -> Select the computer that was added earlier and perform a Force InventoryThe results will display under Software | Custom Inventory Fields