Intel AMT "Enterprise Mode" and "Small Business Mode" Provisioning

I have been working quite a bit on "Enterprise Mode" lately. Currently, the Intel AMT Developer Tool Kit only supports "Small Business Mode" provisioning which is simple to setup but not as secure as Enterprise mode. The main difference between the two is that Enterprise mode optionally uses TLS for securing AMT connections. This of course requires that you setup trusted and signed certificates in both the management console and AMT.

Looking at it now, for people running just a few vPro machines, small business mode is probably best. It's also a great way to get to know AMT without any complicated setup. Setting up certificates can be complicated if only a few machines are going to be used. Still, I am working on making it easier to support the full provided by Enterprise mode.

One way to setup Enterprise mode is called "One Touch Provisioning", but one of my friends was saying, it's like "hugging a cactus". You have to go into the BIOS screen and type a rather long secure key. Luckily, you can also use a USB key to setup everything and I will try this technique soon. Also, Intel is coming out with "Zero Touch Provisioning" soon, and that will allow secure setup without having to go into the BIOS screen. This is very helpful when you want to setup lots of machines.


For more complete information about compiler optimizations, see our Optimization Notice.