Beginning with Intel® Active Management Technology (Intel® AMT) release 3.0, Intel introduced support for the industry standard WS-Management protocol. This allows management software to use a combination of standard CIM classes, as well as Intel specific classes, to perform Intel® AMT operations. Support for the WS-Management specification enables software developers and IT professionals to leverage off-the-shelf infrastructure and tools to interact with Intel® AMT platforms. But what about using WS-Management based software in conjunction with Intel® AMT platforms older than release 3.0? Intel has shipped many platforms that can only support a firmware version of 2.6 or below. Can WS-Management based software be used with these older Intel platforms?

Enter the Translator

The Intel® WS-Management Translator makes it possible for WS-Management based software to be used in conjunction with Intel® AMT platforms older than version 3.0. Using the translator, management software can send WS-Management commands to the translator, the translator will in turn perform the equivalent operation on an Intel® AMT device using a proprietary SOAP based protocol understood by all Intel® AMT platforms.

Download The Intel® WS-Management Translator for vPro™ Processor Technology

Key features in the Translator 1.1 (build 568)

• Validation with SCCM SP2
• Enhanced legacy support for wireless profiles, 8021.x profiles, and 3party data storage
• Enhanced Kerberos authentication and Kerberos ticket handling
• You can upgrade from existing builds by using this VB Script or it can be installed on its own.

Download Source Code for The Intel® WS-Management Translator for vPro™ Processor Technology

Genscript

Genscript is a tool for activating Intel® Active Management Technology (Intel® AMT) features in a scriptable environment. Genscript generates Visual Basic® scripts that can be applied to a single machine or many machines. These scripts programmatically can activate various Intel AMT features using Windows Remote Management (WinRM). Genscript can also be used in conjunction with the Intel WS-Management Translator to perform initial setup of Intel AMT clients and programmatically activate features on AMT clients that don’t natively support WinRM. Intel AMT clients that are already setup, and natively support the WS-Management interface, will not require the assistance of the Intel WS-Management translator software.

Download Genscript for The Intel® WS-Management Translator for vPro™ Processor Technology

Additional Information

• Ajith Illendula's Blog post - WS-Management Translator for Intel AMT
• Frequently Asked Questions
• WS-Management and Intel® Active Management Technology
• Issuing a Web Server Certificate with IIS
• Configuring the Translator for use with SCCM/SP1

The Intel® SCS to Microsoft® SCCM utility is aimed for users interested in migrating SCS-provisioned systems to Microsoft SCCM.
The SCS to SCCM migration utility is used to prepare Intel® Active Management Technology (Intel® AMT) systems that were configured using the Intel® SCS and managed
by any management console to be configured and managed by Microsoft* SCCM SP2.

The utility does this in three easy steps:

1. It creates a CSV file containing information on all Intel AMT systems provisioned by the SCS that are to be migrated. This CSV file includes the data about these systems
   that is needed by SCCM. The CSV file is imported to SCCM prior to actual migration.
2. It performs a series of tasks that brings the systems to a state that will allow SCCM to configure them.
3. It performs a partial unprovisioning of the Intel AMT systems.

Download Intel® SCS to Microsoft® SCCM utility **

**The terms of the software license agreement included with any software you download will control your use of the software.

Intel® Active Management Technology (Intel® AMT) is a capability embedded in Intel® vPro™ technology based PCs that enhance the ability of IT organizations to manage enterprise computing facilities. Intel AMT operates independently of the platform processor and operating system. Remote platform management applications can access Intel AMT securely, even when the platform is turned off, as long as the platform is connected to line power and to a network. Independent software vendors (ISVs) can build applications that take advantage of the features of Intel AMT using the application programming interface (API).

Download the most recent update to the Intel® AMT SDK and get everything you need to develop manageability applications.

Download Intel® AMT SDK

• Secure Audit Log (also known as “Access Monitor”) - Configuration and samples (4.0 & 5.0).
• Client Initiated Remote access (CIRA) - Manageability Presence Server (MPS) sample provided, configuration support & most samples updated to support working remotely (4.0 & 5.0).
• Network Access Protection (NAP) - System Health Validator (SHV) sample (4.0 & 5.0).
• Samples for additional DASH 1.0 profiles - 'Role Based authorization (ACL)', WS-Eventing & DASH Discovery support (3.2 - apart from WS-Eventing, 4.0 & 5.0).
• USB configuration has been updated to support many configuration options.
• Wireless configuration WS-Management support (4.0).
• New event log interface (3.2, 4.0 & 5.0).
• Alarm clock feature (5.1).
• DASH 1.0 support (5.1). This change has caused some backward compatibility issues. Additional information can be found in Intel AMT WS-Management Capabilities Comparison.pdf document, in the DOCS folder.
• IMRSDK.Dll can now work with a Certificate singed by a root CA with a 4096 key & SHA 512 algorithm (5.1).

• KB889388 - Digest DLL crash when connecting to an Intel AMT machine from 2 applications simultaneously.
• KB899900 - For using Kerberos authentication to connect to an Intel AMT device.
• KB908209 - For using Kerberos authentication to connect to an Intel AMT device using Internet Explorer.
• KB842773 - For using digest authentication from a Windows application to connect to an Intel AMT device on which Kerberos users are configured.
  • Note: this is included in Windows XP* SP2 and in Windows Server 2003* SP1.

The key new features of Intel AMT 4.0 that are supported in this SDK:

• Client Initiated Remote Access – allow client machines outside of their trusted intranet to make a call for help over the internet and establish a remote management connection.
• Secure Audit Log support – enables some policy based events on the system to be monitored by designated auditors without any possible disruption by administrators.
• Network Access Protection (NAP) support - Allows Intel AMT to gain Out Of Band access to a Microsoft NAP enabled 802.1x network to for SW updates, inventories, remote diagnostics, etc.
• Wireless Configuration – provides ability to manage the clients through their wireless network connection and modify communication profiles and settings.

Release Details

• Please see the readme and versions files for more information about this release.
• Need more help? Refer to the FAQs or get expert advice from the Developer Discussion Forum

• Download Microsoft Windows* Platform SDK
• Overview and Introduction

• The Intel Manageability Community
• Intel® Active Management Technology Use Cases
• Architecture Guide: Intel® Active Management Technology
• Intel® Active Management Technology
• Intel® Active Management Technology (Intel AMT) Software Development Kit (SDK) Start Here Guide
• Download the latest Intel® AMT Software Development Kit (SDK)
• Intel® Active Management Technology Software Development Kit (SDK) User Guide
• Intel® AMT: Developer Resource Guide
• Intel® Active Management Technology
• Intel® Active Management Technology Brief

Online support for the Intel® AMT Software Development Kit is available online through the Manageability Software Development forum.

Intel® Active Management Technology’s (Intel® AMT) Setup and Configuration Service (Intel SCS or SCS) provides developer or ISV with the tools to set up and configure Intel AMT devices. The Setup and Configuration Service (SCS) allows for most aspects of setup and configuration to be completed through a remote management console. It supports end user environments that implement TLS security and a DHCP network. The service package consists of a configuration engine and installer in binary form, plus a reference graphical user interface that the ISV may integrate into their own software.

Download the recent update for Intel® AMT SCS and get tools to set up and configure Intel AMT devices.

Intel® AMT Release 5.2 includes DASH compliance changes that impact the Intel® AMT Setup and Configuration Service. In order to provision Intel AMT Release 5.1 with the Intel SCS, you must use version 5.0.2 or greater.

IntelAMTSCS_5.2.0.34B.zip

SCS 5.2 is a point-release based on SCS 5.0 code-base. Feature set includes the following (See release notes for full details):

• Intel® AMT 5.2 and Intel® AMT 4.2 support
• LDAP Certificate Subject Name
• Support for Windows 2008 Server
• Security issues
• Various bug fixes/improvements over 5.1.x release:
  • Wireless Sx support and Wake on Wireless
  • Include special characters in host names
  • Intel® AMT 5.1 DASH updates
  • (First three features were already supported in the 5.0.2 Release)
  • 64bit O/S Support
  • Level III Manageability Upgrade (B43 SKU) support
  • Activator DHCP Renew option
  • CIRA Actions logging
  • Improvements when exporting TLS-PSK keys to a USB (UKPU-like)
  • OpenSSL Library update
  • Various bug fixes/improvements over 5.0 release

Intel® SCS Setup Wizard - v5.1 Now Available

This utility is designed to automate the installation of the Intel® Setup and Configuration Service (SCS) along with the third party pre-requisite components automatically. This version replaces all previous releases of the wizard.

The Intel® SCS Setup Wizard will install or verify existing components that are required by the SCS, and then install the service and the Intel® SCS Console. After running the Intel® SCS Setup Wizard, the Intel® SCS Console can be used to provision Intel® vPro™ technology client systems.

Download Intel® SCS Setup Wizard - v5.1

Documentation:

• Console Guide
• Installation Guide
• Troubleshooting Guide
• Intel vPro Technology Activator Guide
• Internationalization of SCS Messages
• Configuration Service SOAP API
• Intel ® AMT SCSDiag Utility Quick User’s Guide

Check out the Manageability blogs for all the latest updates, news and discussions related to Intel AMT and Intel SCS. Need more help? Refer to the FAQs or get expert advice from the Developer Discussion Forum

Intel AMT SCS Version Details

The SCS 3.3.2 contains the following (See the release notes for the full details):

• RCT renamed to Activator and synchronized with standalone release of Activator
• Vlan bug fixed: SCS sets vlan_tag only if vlan mode is enabled in profile
• Fixed the bug caused to remove an existing DB during the upgrade or multi-SCS installations
• Handle leak during PKI configuration flow fixed

SCS Build 3.2.2.1
SCS 3.2.2 includes the following new feature: The user can choose to type-in the SQL server username and password, to address specific customer DB strong password requirements.

SCS 3.3 includes the following new features:

• RCT Can Send “Hello” Packets
• Improve the AMT FQDN (Fully Qualified Domain Name) change process
• SCS 3.3 Bug fixes

• The SCS no longer performs unnecessary re-provisioning after initial successful provisioning of Intel AMT systems.
• The procedure that cleans the csto_status_of_requests table in the SCS database has been made more efficient and takes less time to run.

Intel AMT SCS 3.1 package includes the SCS Installer, Release Notes, Configuration Server Interface Guide, and Sample Scripts. And, the SCS Installer includes all components in two packages – one for the console and one for the remaining components. The components are: WinService, SOAP API, Console, and the Add User Command Line.

• Technical Overview
• SCS SOAP API Interface Guide
• SCS Installation and User Manual
• Internationalization of SCS Messages

The following new features were added to SCS since the 5.0.0.92 release:

• In supported firmware versions SCS now accepts special characters such as underscore (“_”) and pound sign ("#") for the AMT host name.
• If the Wake on Wired feature is enabled, then the Wake on Wireless feature is also enabled. The latter is part of Support for Wireless in Sx, which is supported in AMT Mobile FW since version 4.0.
  • The restart IIS feature, used during install and uninstall, can be disabled through the registry:
  • To prevent restarting the IIS during installation create the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Intel\SCSNotRestartIIS_Install
  • To prevent restarting the IIS during an uninstall create the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Intel\SCSNotRestartIIS_UnInstall
• New features in Activator
• Bug fixes and some improvement of the RN issues mitigation

SCS 5.0 includes the following new features: (please refer to the release notes to learn more).

• NAP support
• Usuability improvements
• Support for change hostname/UUID
• Support for automatic configuring and extracting PID from hello packet.
• Extended AMTList APIs to support recovering configuration parameters.
• Attempt connection with AMT using FQDN.
• SCS tested in various Active Directory forest configurations.
• New SCS console
• WSDL improvements
• Perform wireless configuration over WS-MAN.
• The installer now registers the SCS in Active Directory.
• Includes a sample script for creating a certificate template that can be used for both 8021x and TLS.

Online support for the Intel® AMT Setup and Configuration Service is available online through the Manageability Software Development forum.

Intel® Active Management Technology (Intel® AMT) is a set of firmware-resident hardware capabilities that enable network-management applications to perform sophisticated remote functions, even when the target device is powered off or has a corrupted operating system (OS). Because this technology helps to safeguard system administrators' ability to manage systems remotely and minimize costly desk-side visits, Intel AMT represents a substantial advantage to customers. Because the means for customers to implement this technology relies on software implementations, Intel makes a powerful set of tools available to software makers, helping to facilitate the integration of Intel AMT into network-manageability applications.

These are all tools that can be used when experimenting with or writing applications for Intel® AMT. Here are some brief descriptions and when to use them:

Intel AMT Software Development Kit (SDK): provides the low-level programming capabilities to enable developers to build manageability applications that take full advantage of Intel AMT. Provides sample code and all the Application Programming Interface (APIs) needed for implementing Intel® AMT. Both the Intel AMT RDK and the DTK use the APIs provided in the SDK. Use the most recent release of the SDK to integrate Intel® AMT into your application.

Manageability Developer Tool Kit (DTK): This is also a "solution" written in C# for Microsoft Windows. Since the Source Code is also available, it can also be used as "example code." This tool is also currently being updated and maintained. Use this to get a great idea of how Intel® AMT works and a lot of us also use it to verify if a certain feature is working.

Intel AMT Setup and Configuration Service (SCS) automates the task of populating Intel AMT platforms with credentials and parameters that enable them to be administered remotely. Provides developer or ISV with the tools to set up and configure Intel AMT devices. The Setup and Configuration Service (SCS) allows for most aspects of setup and configuration to be completed through a remote management console. It supports end user environments that implement TLS security and a DHCP network.

Intel AMT Reference Design Kit (RDK) includes a set of customizable, open-source software building blocks that developers can use to rapidly build Intel AMT console applications. This is an AMT "solution" written in Java on Linux provided to help developers implement Intel® AMT. It is very much like the DTK, only it is based on older versions of Intel® AMT. This tool is no longer being updated or maintained. Use it only as an example to get started in a Java environment.

Intel® WS-Management Translator for vPro™ Processor Technology: Use the Intel® WS-Management Translator to send WS-Management commands to manag e Intel® AMT platforms older than release 3.0 that understands only legacy SOAP based protocol. The source code for this tool is also available for download.

Intel® vPro Technology Activator Utility is the next generation of the Remote Configuration tool. A Windows executable that runs locally on an Intel® Active Management technology(Intel AMT)-enabled platform.

Intel® AMT Open Source Drivers and Tools: The Openamt project is an open-source project providing drivers and tools to support Intel Active Management Technology (Intel AMT) on Linux and other operating systems

Intel AMT Add-on for Microsoft* SMS 2003: The Intel® AMT Add-on plug-in enables Microsoft* SMS 2003 to discover and manage Intel® VPro™ PCs remotely.

Intel AMT Management Pack for Microsoft OpsMgr and Essentials v3.0: This management pack enables the users of these applications to take advantage of the advanced, hardware-based system management capabilities of Intel® AMT, which are built into PCs with Intel® VPro™ processor technology.

Intel Desktop Boards Executive Series: Intel® Desktop Boards Executive Series are designed to offer new levels of manageability, security, and power-efficient performance while offering support for Intel® Core™2 Duo processors and Intel® vPro™ processor technology.

Intel AMT Release 3.0 Firmware Errata document