Configuring the SMB Mode

During power up, the Intel AMT platform first displays the BIOS startup screen, and then the BIOS Extensions are processed. Entry into the Intel AMT BIOS Extension is BIOS vendor dependent. Intel AMT reference platforms display a screen prompting you to press <Ctrl+P>. When you press <Ctrl+P> control passes to the Intel® Management Engine BIOS extension (MEBx) Main Menu.

note-icon Note:

Before configuring the SMB mode, set the correct time in the BIOS.

Perform the following steps to define the SMB settings.

1.  Enter the MEBx default password (“admin”).

2.  Change the default password to a new value (this step is required in order to proceed). The new value must be a “strong” password: It should contain at least one upper case letter, one lower case letter, one digit and one special character, and be at least eight characters.

3.  From the MEBx Main Menu, select Intel (R) ME Configuration.

4.  Select Intel (R) ME Features Control, and then select Manageability Feature Selection. A warning message appears saying that a reset will occur after configuration changes are made. Press <Y>.

5.  Ensure that the Intel (R) AMT option is selected, and return to the MEBx main menu. (If you changed the selection, the system reboots).

6.  From the MEBx Main Menu, select Intel (R) AMT Configuration and press <Enter>.

The menu options displayed in the Intel (R) AMT Configuration menu, vary slightly according to the Intel AMT release and the settings that are already defined.

7.  Select Provision Model and press <Enter>.

A message appears asking if you want to change to Enterprise or Small Business.  Ensure that you select the Small Business mode. The Intel AMT device will not perform properly if you try to operate it in Enterprise mode without completing the full configuration process.

8.  Select Host Name and enter the System Host Name of the platform being configured.

note-icon Note:

When Intel AMT is configured with a static IP address, then two IP addresses are required, one each for the host OS and for the Intel AMT device. The host and the Intel AMT device also need different host names. If the IP address is provided by a DHCP server, then the host and Intel AMT share an IP address and a host name.

9.  Select TCP/IP and press <Enter>.

a.   If the Intel AMT is earlier than release 4.0, a message appears asking if you want to Enable/Disable the Network Interface. Perform one of the following:

   Disable the Network Interface. If network capabilities are disabled, TCP/IP is automatically configured to DHCP disabled mode with static IP 0.0.0.0. Continue to step 5.

   Enable the Network Interface and continue configuring TCP/IP parameters.

b.   A message appears asking if you want to Enable/Disable DHCP. Perform one of the following:

   Enable DHCP and enter the platform domain name. The domain name, combined with the host name and the DHCP-supplied IP address will be used by the DHCP server to register the platform on the DNS (if this capability is enabled in the DHCP server).

   Disable DHCP and enter the static IP addresses.

10.       Optionally (not available for Intel AMT releases 2.5/2.6/4.0 and 6.0 and later), select VLAN to enable or disable this setting. The VLAN setting allows the out-of-band traffic targeted to and transmitted from Intel AMT to be assigned to a logical, virtual LAN separate from the in-band communication on the Local Area Network. Enable or Disable this setting depending on the network configuration. Intel AMT can use a VLAN that is different from the host processor, or the host processor can be configured to operate without a VLAN definition.

When the Intel AMT device is configured to share IP addresses with the host processor, using a DHCP-assigned address, both the host and Intel AMT must be configured to use the same VLAN. The DHCP server should be enabled on this VLAN as well.

11.       Select SOL/IDE-R to enable/disable the remote control features of Serial over LAN and/or Storage Redirection.

note-icon Note:

Beginning in release 11.0, Storage Redirection uses the USB-R protocol rather than the IDE-R protocol; however, the menu item has not been changed so as to preserve backwards compatibility.

If SOL and Storage Redirection are not enabled here, these capabilities cannot be enabled remotely. Selecting the menu item displays three enable/disable selections. The Username and password option determines whether the redirection interface can use a username and password to authenticate an SOL/Storage Redirection session. When this option is enabled, Digest ACL entries, which have a username and password associated with them, can be used to authenticate SOL/Storage Redirection sessions. Disabling the username and password option means that SOL/Storage Redirection will authenticate only to Kerberos ACL entries (available for SMB in Intel AMT release 2.1 and later releases). The remaining two choices allow enabling/disabling SOL and Storage Redirection independently.

12.       Return to the Main Menu and select Exit. Upon exiting the Intel AMT BIOS Extension configuration screens, hardware information is gathered and stored in the Non-Volatile Memory of the Intel AMT platform. A supported web browser can be used from a remote computer to view and update the Intel AMT platform parameters (see Accessing Intel AMT via the WebUI Interface).

note-icon Note:

Depending on the BIOS vendor, localized BIOS may not allow configuration of the Domain and Host name of the Intel AMT device. A host name is needed only if the platform is configured to get an IP address from a DHCP server. However, a static IP is usually used in Small Business mode. The host name can then be configured using WebUI.

Copyright © 2006-2022, Intel Corporation. All rights reserved.