Intel® AMT and USB Versions

This section describes additional USB versions and features supported by the MEBX of the different Intel AMT releases.

note-icon Note:

For more information, see Using a USB Device for Configuring Intel® AMT Parameters and the USBFile Readme.txt file inside USB_File_Module_<version>.zip in the SDK.

Intel AMT Release 3.0

The ME BIOS extension for Intel AMT release 3.0 and later releases supports an added format (Version 2.0) for USB keys that aids in preparing Intel AMT platforms for remote configuration. This automates the simplified one-touch process. The record on the USB key contains the following information:

   Option to enable the Intel AMT capability on the platform if it is not already enabled

   Current and replacement MEBx password

   Optional PKI DNS suffix or the setup and configuration application FQDN

   Option to enable Remote Configuration

   Up to three certificate hashes

   SOL/Storage Redirection configuration

note-icon Note:

USB Version 2.0 supports non-consumable records — The same record is used to configure all Intel AMT systems.

 

Intel AMT Release 4.0

BIOS implementations for Intel AMT release 4.0 and later releases can import additional parameters from a USB key record. All the parameters enterable via the MEBx can be entered using the version 2.1 record format. The additional parameters include:

   Enabling firmware update

   Setting the provisioning mode (enterprise vs. SMB or Manual)

   Setting the power package and power package idle timeout

   Setting the hostname

   Setting the domain name

   Enabling/disabling DHCP use

   Setting a VLAN value

   Setting the provisionserver IP address and port number

   Setting a static IPv4 address, along with subnet mask, gateway address, and DNS addresses

   Setting a password policy flag

 

Intel AMT Release 6.0

The ME BIOS extension for Intel AMT release 6.0 and later releases supports an added record format (Version 3.0) for USB keys. It adds the following features:

   Supports configuration of IPv6 parameters

   Shared/Dedicated FQDN

   Dynamic DNS configuration

   KVM configuration

   Stop/Start provisioning process

   Manual Configuration (the provisioning mode variable is deprecated. nevertheless, for backward compatibility, specifying provisioning mode=SMB will result in manual configuration)

   CCK related parameters

note-icon Note:

KVM configuration has the following options: "KVM Enable\disable" and "User Consent". AMT 6.0 MEBx implementation requires that both options will be present in the setup.bin file for KVM configuration.

 

Intel AMT Release 7.0

The ME BIOS extension for Intel AMT release 7.0 and later releases adds a new record format (Version 4.0) for USB keys with the following features:

   The “KVM Opt-In user consent” option was replaced by “User Consent Options”, as additional features are impacted by user consent, not just KVM.

   Similarly, “KVM Opt-In remote IT consent“ option was changed to “Opt-In remote IT consent policy” and now has three possible values: 0 – disabled, 1 – enabled for KVM only, and 255 – a new value – that indicates that opt-in is configurable remotely for all features.

   “FW local update” now has a new value to enable password–protected firmware local update mode.

   The “FW update qualifier” and “secure FW update” flags were removed.

   A “scramble” option was added to enable scrambling of the USB file records. When this flag is used, the USBFile tool scrambles the records so that a casual reader of the record data will not be able to see the data stored there. The data is not encrypted, so this is not a substitute for the need to handle this data securely.

Intel AMT Release 11.0

The ME BIOS extension for Intel AMT release 11.0 removes support for the PSK configuration of USB keys. The “-rpsk” parameter is therefore no longer recognized.

 

Copyright © 2006-2022, Intel Corporation. All rights reserved.