**Disclaimer: This blog is very old and may not be relevant anymore. It lives for historical purposes. For up-to-date information about Intel vPro Technology, visit the Business Client Home Page. (June 2013)
The Intel® SCS is getting updated! I wanted to use this blog to highlight some of the changes and to provide a quick cheat-sheet for things that you will need to know when you start using it and then managing your Intel® AMT systems.
New: Host Based Configuration. Now we can locally configure the AMT device via a configuration application running on the AMT Client. This is accomplished via an XML configuration profile. The application and profile can be sent to the Intel AMT system(s) in a deployment package and run via a script. (If this isn't exciting, I don't know what is!!)
Once you have successfully configured your AMT systems, the AMT device will be in one of the following control modes:
Client Control Mode: This is the default mode for host based configuration. When in this mode, you will need to take the following into consideration due to the need to maintain secure operations.
- System Defense feature is not available
- User Consent* is required for all redirection operations or changes to the boot process
- Permission from the Auditor user (if defined) is not required to unconfigure the AMT system.
- Some AMT functions are blocked in order to ensure that untrusted users cannot get control of the Intel AMT system.
Admin Control Mode: All Intel AMT features are available. All non-host based configuration methods will automatically put the Intel AMT 7.0 device in this mode. In this mode you can define which operations require user consent.
*And now you might be wondering what "User Consent" is? This is also a new feature. It shows up when a remote connection to the AMT is established and a message appears on the AMT Client. This message contains a code that the user must give to the person who wants to connect to his/her computer. The remote user must type in the code on his/her console in order to continue with the remote operation.
New: Unified Configuration Process. This process allows the definition of one deployment package to configure all Intel AMT versions in their network and automatically uses the necessary configuration method for each Intel AMT device. How is this done?
- This process uses two copies of the same XML profile. The first copy is created and stored in the RCS (the Remote Configuration Service.) This is necessary for remotely configuring Intel AMT 2.2 to Intel AMT 6.x devices
- The second copy is exported from the Remote Configuration Server (RCS) and must be included in the deployment package and is used by the Configurator to locally configure devices that support host based configuration. This copy also includes information (added during export) about the RCS and the required control mode for the Intel AMT device.
Note that configuration that utilizes the RCS implies "Admin Control Mode" and that configuration that strictly is Host Based (i.e. no use of the RCS) is by default Client Control Mode.
The arrival of the Intel® SCS 7.0 will be announced on our Manageability and Security Community as soon as it becomes available.