Intel® Active Management Technology (AMT) has built-in manageability features that provide out-of-band management capabilities to allow IT to remotely heal systems after OS failures. Systems can be diagnosed and re-booted remotely, reducing the need for on-site visits.
As network planners and security analysts consider implementing Intel® Active Management Technology into their environments, they can use the information in this document to gauge the native security of the platform and to understand some of the key security decisions associated with using the technology.
The Manageability Developer Tool Kit (DTK) is a free set of tools for designers, developers and testers that are building and testing Intel AMT applications.
There are many resources about how to develop applications to work with the Intel AMT platform, but there is no such as availability when it’s about executing a testing process; this article defines some test cases based on the test scenarios described in
Note: As of the AMT SDK released 3/03/10, the Remote Encryption Management SDK content is now part of the AMT SDK. Look in the SDK Resources -> Remote Encryption Management section for the documentation, and the \Windows\ Remote_Encryption_Management folder in the SDK for the remainder of the content.
In this use-case example, an IT manager receives shipment of several PCs that he wants to configure to use Intel® AMT. These PCs are all shipped with Intel AMT turned on (the manageability mode set to "AMT") and SOL/IDE-R turned on (assuming this feature is desired by the end user). Intel AMT must be configured so that the management console can securely identify and communicate with an Intel AMT-enabled PC. Note that Remote Configuration is available starting with Intel AMT 3.0 for the desktop and AMT 2.6 for Notebooks.
In this use case example, an IT manager receives shipment of several PCs that the business wants to configure to use Intel® AMT. These PCs are all shipped with Intel AMT turned off (the manageability mode set to "None"). Intel AMT must be configured prior to deployment to users' desks so that the management console can securely identify and communicate with an Intel AMT enabled PC.
Using Intel® AMT One-Touch Configuration to Enable Provisioning of Business PCs
One-Touch Configuration of Intel AMT-enabled business PCs encompasses a number of setup scenarios: