You have a brand new system with Intel® vPro™ Technology. How would you go about provisioning it and using the Intel AMT features?
Well, let’s start from the Bios settings. When you boot up the system, get into Intel ME settings (how to do this vary among the OEMs. For some, there will be a message to hit <CTRL + P> while booting up to get into the MEBx settings; for others, hitting F2 (or Del) while booting will take you to the Bios settings where there is a separate tab for Intel ME). Do the following steps in the Bios settings:
Intel ME configurations:
- Change the default ME password: the default password is "admin". Change that to a stronger password. The guidelines for creating a good ME password can be found here.
- Select Manageability feature as Intel AMT
- Select the power policies: this can be done through bios, WebUI or Intel AMT SOAP interface. Visit Gael's blog here on a nice overview of various power packages.
Intel AMT configurations:
- Enable/Disable DHCP (For mobile systems, you have to use DHCP)
- Host Name & IP Address: If you are choosing static IP, you have to have separate Host Name & IP Address for Intel ME than your host CPU. If you are choosing DHCP, you can use the same Host Name and IP Address for Intel ME as the host CPU.
- Provisioning: Small Medium Business (SMB)/Enterprise. Guidelines for deciding on whether to use SMB or Enterprise mode can be found here.
- Enable SOL/IDE-R
Hit F10 to save the settings and reboot the system. Now, confirm that you have the following drivers installed on your system:
- Intel 82566DM Network Interface Controller
- Intel Management Engine Interface (aka HECI driver)
- Serial-Over-Lan (SOL) Driver
- IDE-Redirect Controller
- Intel® Active Management Technology LMS Service
- Intel® AMT System Status Service
If not, you can install them from the driver CD that comes along with your system. Or you can find them in the OEM site. Also, it is recommended to check your OEM site in between to see if there are any Bios updates.
The next step is to check if you can access the AMT client system from the Management system. Before doing this turn off any firewall on your client and the management system. Try to ping the client from the management system.
Now, you can connect to the client system from the management system using WebUI. Intel AMT device has a built-in web interface which can be used by the management system to connect to the client and change some of the configuration parameters. For doing this, open an Internet Explorer window on your management system and type: http://ipaddress:16992 where ipaddress is the IP Address of client system. Enter the username and password that you had used for MEBx in the log on window to log into the client system. Once you are there, you can see detailed information on the CPU, memory, disk etc. You can use this WebUI for changing your client settings including IP settings, host name, ping response, editing user accounts and updating the firmware. The Remote Control section will allow you to send commands to the client for power off, reboot, reset etc.
Once these steps are completed, your AMT client is set up successfully and ready to go. Now you can use a Management Console application in the Management system to remotely manage your client system.