In this use-case example, an IT manager receives shipment of several PCs that he wants to configure to use Intel® AMT. These PCs are all shipped with Intel AMT turned on (the manageability mode set to "AMT") and SOL/IDE-R turned on (assuming this feature is desired by the end user). Intel AMT must be configured so that the management console can securely identify and communicate with an Intel AMT-enabled PC. Note that Remote Configuration is available starting with Intel AMT 3.0 for the desktop and AMT 2.6 for Notebooks.
use case
Intel® AMT Use Case #10: One-Touch Configuration
In this use case example, an IT manager receives shipment of several PCs that the business wants to configure to use Intel® AMT. These PCs are all shipped with Intel AMT turned off (the manageability mode set to "None"). Intel AMT must be configured prior to deployment to users' desks so that the management console can securely identify and communicate with an Intel AMT enabled PC.
Using Intel® AMT One-Touch Configuration to Enable Provisioning of Business PCs
One-Touch Configuration of Intel AMT-enabled business PCs encompasses a number of setup scenarios:Intel® Active Management Technology Use Case #9: Endpoint Access Control (Protect)
Intel® Active Management Technology (Intel® AMT) helps secure network endpoints by validating their compliance with network policies. Endpoint access control (EAC) feature allows the IT administrators to implement differentiated policy enforcement and configuration based on the security state of the end point. This example examines the case where a system with non-compliant software configuration is attempting to request the access to the network.
Intel® Active Management Technology Use Case #8: Agent Presence Checking (Protect)
Intel® Active Management Technology (Intel® AMT) helps to safeguard the operation of critical manageability functions by helping to remove the threat associated with User partition software agents being removed without detection. Such removal could make the system vulnerable to network attacks, or it could render critical management functions non-operational. This is particularly a problem if agents are disabled on a notebook that is connected to 3rd party network and tunneling back to the corporate LAN over VPN.
Intel® Active Management Technology Use Case #7: Hardware-Based Isolation and Recovery (Protect)
Intel® Active Management Technology (Intel® AMT) helps to decrease vulnerability to network attacks. Outbreak-containment filters help to detect suspicious activity. This example examines the case where a day-zero virus (such as Slammer) attacks a network. Note that greater connectivity options, including public wireless hotspots, hotels, and home networks increase vulnerabilities. The example includes efforts to reduce network exposure once platforms infected with the virus begin propagating the infection across the network.
Conventional Virus-Recovery Limitations
Intel® Active Management Technology Use Case #6: Software Version Compliance (Protect)
Intel® Active Management Technology (Intel® AMT) helps to ensure that all platforms in an enterprise are compliant with corporate requirements related to having up-to-date software versions, virus signatures, etc. Out-of-band (OOB) polling helps to address the issue that 15% to 20% of all platforms are typically not visible on an in-band, down-the-wire basis, which traditionally complicates efforts to avoid risks associated with outdated software such as runtime errors, viruses, malware attacks, etc.
Intel® Active Management Technology Use Case #5: Remote Diagnosis, Local Repair (Heal)
Intel® Active Management Technology (Intel® AMT) can help to reduce the support overhead associated with repairing system-boot failures, even when the issues that underlie those failures cannot be repaired remotely. By enabling problem diagnosis on a down-the-wire basis, Intel® AMT platforms can reduce the need for time-consuming technician visits to diagnose the platform, which otherwise increase user downtime, as well as consuming IT resources.
In this use-case example, end-user platforms cannot boot due to hardware issues such as hard drive corruption and memory errors.
In this use-case example, end-user platforms cannot boot due to hardware issues such as hard drive corruption and memory errors.
Intel® Active Management Technology Use Case #4: Remote Diagnosis, Remote Repair (Heal)
Intel® Active Management Technology (Intel® AMT) can help to reduce the support overhead associated with repairing platform boot failures. By enabling remote resolution of a greater proportion of such failures, costly, reactive repair processes can be avoided. Additionally, both the end-user and IT technicians save valuable time through the elimination of time-consuming diagnostic. In this use-case an end-user platform will not complete a boot due to a missing or corrupt DLL. Intel® AMT is used to facilitate remote diagnosis and repair of the end-user's platform.
Intel® Active Management Technology Use Case #3: Hardware Inventory Management (Discover)
Intel® Active Management Technology (Intel® AMT) improves the visibility of enterprise hardware platforms, dramatically improving the completeness of hardware inventories. Capabilities of Intel® AMT help to reduce the impact of software-agent removals, powered-down machines, non-functioning operating systems, and other system failures during hardware inventories. These problems make as many as 15%-20% of all systems not visible down-the-wire at any given time.
Intel® Active Management Technology Use Case #2: Software Inventory Management (Discover)
Intel® Active Management Technology (Intel® AMT) improves the accuracy and efficiency of software inventories, helping to enable regulatory compliance and save on licensing costs. This improvement avoids inaccuracies in software inventory information that can impede regulatory compliance, lead to incorrect payments for software licenses and maintenance contracts, and fail to uncover over-utilized or under-utilized software licenses.
Pages
