# Scripts Run by the Configurator

Scripts run by the Configurator are only run on Intel AMT systems that support host-based configuration (Intel AMT 6.2 and higher). The script must be put in a location that the Configurator can access from the Intel AMT system. The Configurator can run a script after configuration, reconfiguration, and maintenance operations done with these commands:

- ConfigAMT
- MaintainAMT

This table describes the CLI parameters of these commands used to run scripts.

Parameter | Description
--- | ---
/FileToRun <filename> | If this parameter is supplied, the Configurator will run this executable file (batch, script, or executable) after the command has completed. If the /FileToRun parameter is used without the /LowSecurity global option, the file must be digitally signed (see Digital Signing of Files). If the file is not signed, the Configurator will NOT run the CLI command or the file. In addition, if the /LowSecurity parameter is not used, the file must be located in the same folder as the ACUConfig.exe file.
These additional optional parameters are valid only if /FileToRun was specified:
/FileHash <SHA256 hash> | When this parameter is supplied, the Configurator runs a hash function on the file supplied in the /FileToRun parameter. The result of the hash function is then compared with the original hash value of the file, supplied in this parameter. If the values of the hashes are different, the Configurator will NOT run the CLI command or the file. (If any change was made to the file, the hash values will not be the same.) Before you can use this option, you must generate a SHA256 hash value from the <filename> file. The sample_files folder includes an application (SHA256.exe) that you can use to generate the hash value. For example: SHA256.exe MyFile.bat will return the hash value of MyFile.bat. The hash value is marked in blue. Copy the value and supply it in the <SHA256 hash> parameter.
/FileUser <password> | It is recommended to use this parameter to supply a user with the minimum permissions required to run this file.
/FilePassword <password> | Contains the password required to run the file. Valid only if /FileUser was also specified.

This table describes the parameters and the sequence in which the Configurator sends them to the file that you specify in the /FileToRun parameter.

# | Description
--- | ---
1 | The user defined in the /FileUser parameter*
2 | The password defined in the /FilePassword parameter*
3 | The hostname defined in the Intel AMT device
4 | The FQDN defined in the Intel AMT device
5 | The UUID of the Intel AMT device
6 | The Intel MEBX password of the Intel AMT device*
7 | The password of the default Administrator (“admin”) user in the Intel AMT device*
String Example: fileusername fileuserpassword myhostname myhostname.example.com 88888888-8887-8888-8888-878888888888 mebxpassword adminpassword (Parameters marked with an asterisk (*) are sent to the script in Base64 format.)