Intel AMT and USB Versions

This section describes additional USB versions and features supported by the MEBx of the different Intel AMT releases. For more information, see the readme.txt file in the following folder: <SDKRoot>\Windows\Intel_AMT\Samples\Configuration\USBFile

Intel AMT Release 3.0

The ME BIOS extension for Intel AMT release 3.0 and later releases supports an added format (Version 2.0) for USB keys that aids in preparing Intel AMT platforms for remote configuration. This automates the simplified one-touch process. The record on the USB key contains the following information:

   Option to enable the Intel AMT capability on the platform if it is not already enabled

   Current and replacement MEBx password

   Optional PKI DNS suffix or the setup and configuration application FQDN

   Option to enable Remote Configuration

   Up to three certificate hashes

   SOL/IDE-R configuration

note-icon  Note:

USB Version 2.0 supports non-consumable records — The same record is used to configure all Intel AMT systems.


Intel AMT Release 4.0

BIOS implementations for Intel AMT release 4.0 and later releases can import additional parameters from a USB key record. All the parameters enterable via the MEBx can be entered using the version 2.1 record format. The additional parameters include:

   Enabling firmware update

   Setting the provisioning mode (enterprise vs. SMB or Manual)

   Setting the power package and power package idle timeout

   Setting the hostname

   Setting the domain name

   Enabling/disabling DHCP use

   Setting a VLAN value

   Setting the provisionserver IP address and port number

   Setting a static IPv4 address, along with subnet mask, gateway address, and DNS addresses

   Setting a password policy flag


Intel AMT Release 6.0

The ME BIOS extension for Intel AMT release 6.0 and later releases supports an added record format (Version 3.0) for USB keys. It adds the following features:

   Supports configuration of IPv6 parameters

   Shared/Dedicated FQDN

   Dynamic DNS configuration

   KVM configuration

   Stop/Start provisioning process

   Manual Configuration (the provisioning mode variable is deprecated. nevertheless, for backward compatibility, specifying provisioning mode=SMB will result in manual configuration)

   CCK related parameters

note-icon Note:

KVM configuration has the following options: "KVM Enable\disable" and "User Consent". AMT 6.0 MEBx implementation requires that both options will be present in the setup.bin file for KVM configuration.


Intel AMT Release 7.0

The ME BIOS extension for Intel AMT release 7.0 and later releases adds a new record format (Version 4.0) for USB keys with the following features:

   The “KVM Opt-In user consent” option was replaced by “User Consent Options”, as additional features are impacted by user consent, not just KVM.

   Similarly, “KVM Opt-In remote IT consent“ option was changed to “Opt-In remote IT consent policy” and now has three possible values: 0 – disabled, 1 – enabled for KVM only, and 255 – a new value – that indicates that opt-in is configurable remotely for all features.

   “FW local update” now has a new value to enable password–protected firmware local update mode.

   The “FW update qualifier” and “secure FW update” flags were removed.

   A “scramble” option was added to enable scrambling of the USB file records. When this flag is used, the USBFile tool scrambles the records so that a casual reader of the record data will not be able to see the data stored there. The data is not encrypted, so this is not a substitute for the need to handle this data securely.

Copyright © 2006-2013, Intel Corporation. All rights reserved.