System Center Configuration Manager 2007 Service Pack 1-based systems cannot provision AMT 2.2/2.6 clients in PKI mode and AMT 2.1/2.5 clients in PSK mode

Microsoft System Center Configuration Manager 2007 Service Pack 1 (SP1)-based systems cannot provision clients that have the AMT 2.2 or AMT 2.6 chipset in the PKI mode. The provision process fails in the SetTLSCertificateWithKeyPair function. Additionally, System Center Configuration Manager 2007 SP1-based systems cannot provision clients that have the AMT 2.1 or AMT 2.5 chipset in the PSK mode.

Service Pack Information

To resolve this problem, obtain the latest service pack for Microsoft System Center Configuration Manager 2007, available from this Microsoft web site: http://www.microsoft.com/downloads/details.aspx?FamilyID=3318741a-c038-4ab1-852a-e9c13f8a8140 (http://www.microsoft.com/downloads/details.aspx?FamilyID=3318741a-c038-4ab1-852a-e9c13f8a8140)
For a list of issues resolved in this service pack, click on the following article number in the Microsoft Knowledgebase:

Hotfix Information

To resolve this problem, install hotfix rollup package 960804. For more information about the hotfix rollup package, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Currently, the two kinds of provisioning are Protected Key Infrastructure (PKI) and Pre-Shared Key (PSK). PKI involves using a formatted provisioning certificate to establish a trust relationship between the AMT client and the provisioning server. PSK uses a PID/PPS key pair to establish the trust for provisioning. For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: