Intel® Setup and Configuration Service (Intel® SCS) Frequently Asked Questions (FAQs)

Submit New Article

Last Modified On :   June 30, 2008 3:40 PM PDT
Rate
 



Setup and Configuration Service – General Questions
Who needs to use the Intel Setup and Configuration Service (SCS)?
Developers or ISVs who are interested in integrating the SCS into their application/product.

What is the Intel Setup and Configuration Service (SCS)?
It is a tool that provides an ISV the tools to setup and it is a tool that provides an ISV or developer a means of integrating setup and configuration capabilities into their products.

Which versions of AMT can be configured using the Intel SCS application?
The Intel SCS performs all the necessary steps to make both Intel AMT Release 1.0 and Intel AMT Release 2.0/2.1 devices.

What is the “Hello” message?
This is a message that an Intel AMT device sends once it has been loaded with a PID/PPS key pair and had its default password changed. This indicates the start of the setup and configuration process. Note that “Hello” messages start once a PID/PPS is entered though the MEBx or USB key. They can start even if the Setup and Configuration Service is not installed.

My SCS server is not receiving “Hello” messages even though I have entered a PID/PPS key pair and changed the password on the Intel AMT device.
Make sure that Intel AMT can connect to your SCS by providing the correct IP address of the SCS in the MEBx or by adding a DNS entry called “PROVISIONSERVER” that maps to the machine the SCS is running on. Intel AMT can automatically locate the SCS if it can find a DNS for an entry called “ProvisionServer.<your.domain.com>.

What is a UUID to FQDN mapping?
A UUID is a Universally Unique Identifier assigned to each machine. This identifier is apart of the machines BIOS and can be used to identify the machine independent of its host OS or host name. Before provisioning can be completed you must provide a mapping of the machines UUID to its host name. The can be done using the SCS UI by setting the Intel AMT properties.

Can the SCS be used for maintenance once a system is setup and configured?
Yes. The SCS can be used for updating passwords and ACLs and keeps logs of all performed transactions.

Installation and Prerequisites
What must be done to the SCS server database prior to using the SCS?
Before any setup and configuration can begin, the SCS server database must be configured with the following information:
  1. SCS service configuration parameters
  2. Profiles that define the setup parameters for the Intel AMT-enabled platforms to be configured
  3. Entries identifying each Intel AMT device to be configured, with a link to the profile
  4. A list of valid TLS-PSK keys that match what is installed on the Intel AMT devices awaiting configuration.

What must be done on the AMT device prior to setup and configuration?
An Intel AMT 2.0/2.1 device must have its MEBx password changed from the default password to a strong password. A TLS-PSK key and identifier must also be loaded into the device. These values are entered manually by the IT administrator through the BIOS extension. (The administrator can also use a USB key with values exported from the SCS, or the values may have been preloaded by an OEM.)

Intel AMT Preparation
What other software must be loaded in order to run the Intel SCS?
The Intel SCS requires the following environment/software in order to run. They can be installed on a single computer or on separate computers.
  1. Windows Server 2003 with Service Pack 1
  2. .NET Framework 2.0.
  3. Internet Information Services (IIS) 6.0
  4. Microsoft IE 5.5 or 6.0
  5. Microsoft Certificate Authority (If TCPIP Layer Security is required in an installation.)
  6. Microsoft SQL Server Express
  7. Microsoft’s Active Directory (AD) – optional. The Intel SCS uses AD for Kerberos authentication using AMT objects and for user lists.

Intel SCS Console
When I try to log onto the SCS Console and I have entered the FQDN and the virtual directory, I get the following error message: Login Failed. Reason: The underlying connection was closed. An unexpected error occurred on a send.
Check to make sure the AMT Config service is running. Sometimes the service fails to start or unexpectedly stops after the install.

Where is the SCS getting it’s time from? Windows time is set correctly but the SCS’s time is different.
The SCS gets the time from the OS (displays as UTC.) The AMT Clock can be synchronized from within the SCS User Interface. Make sure the AMT clock check box in the Maintenance Policies portion has been selected. It is also documented on page 85 of the “Intel AMT SCS Installation and User Manual”

Building AMT ConsoleSln.sln project
I am having trouble compiling the SCS Source code. What version of MS VS is required?
The SCS is a VS2005 project and requires the .NET Framework 2.0. When the project is build for the first time, there will be a warning that it could not connect to revision control and asks if you want to temporarily connect without revision control or permanently remove revision control. Choose the “Permanently Remove” option.

Security
Does the Intel SCS communicate securely with the Intel AMT device?
Yes. Intel AMT supports Transport Layer Security (TLS) for secure communications between Intel AMT devices and management console applications.

What information does the Intel SCS send to the Intel AMT device?
The Intel SCS sends the following to the Intel AMT device:
  1. Certificates from a public key infrastructure (PKI)
  2. Access Control Lists (ACLs)
  3. Other setup parameters, as defined in a profile of setup and configuration information specific to the platform or to a family of platforms.