Intel Centrino Pro quick start Intel vPro Enterprise Setup and Configuration Flow

Page 17

Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide

Intel vPro Enterprise Setup and Configuration Flow

Prior to executing the steps for configuring the Intel vPro components (Intel AMT and Intel ME) in Enterprise mode (either Standard or Advanced), it is first important to understand the overall flow of the Enterprise mode configuration process (recall that the main difference between Standard and Advanced is that if you provision your clients in Advanced mode, all management traffic between the management console and the managed clients will be encrypted using cert-based encryption).

In Enterprise mode, an Intel vPro machine receives its configuration settings over the network, once it has been prepared with some initial setup information. The following diagram shows the modes or states that an Intel vPro device passes through before it becomes operational.

Intel vPro Configuration States:

1.

Factory State

 

 

–

AMT disabled

SETUP

 

–

No network configuration

 

–

No security credentials

(Pre-Provisioning)

 

 

 

2.

Setup State

 

 

–

AMT enabled

 

 

–

Basic network configured

CONFIGURATION

 

–

Admin credentials loaded

 

 

(Provisioning)

3.Configured State

–AMT fully configured (e.g power policies)

–Security credentials fully loaded

–Ready for remote management

Factory State: An Intel vPro machine comes from the OEM in Factory State. In this state Intel AMT is un-configured and not available for use by management applications. When an operator enters information via the Intel Management Engine BIOS extension (Intel MEBx) manually or with the aid of a USB storage device, the Intel vPro machine makes the transition into the setup state. See Step 3 – Configure AMT Client BIOS for instructions on how to prepare an Intel vPro machine to receive its configuration settings from a Setup and Configuration Application (SCA) which is inherent in LDMS.

Setup State: When an Intel vPro machine enters Setup State it waits for delivery of its configuration settings from the LDMS core server. After it enters setup mode, the Intel vPro machine periodically sends messages to the LDMS core server. When the LDMS core server receives messages from the Intel vPro machine, it responds by delivering the configuration settings and placing the device in Operational State.

Operational State: The Intel vPro machine enters Operational State once its configuration settings have been supplied and committed. At this point the Intel vPro machine is ready to interact with management applications.

17

Page 16 Page 18
Image 17
Page 16 Page 18
Contents Guide Centrino Pro Processor Technology Quick Start GuideContents What This Document Contains PrefaceIntended Audience Process Overview Where do I go from here? Deciding Which Provisioning Mode to UseProcess Flowchart Deploying Intel vPro Using SMB Basic Mode ProvisioningVerify Intel vPro Client Windows Drivers Configure Existing IT InfrastructureChoose Dhcp or Static IP Addressing for Client Systems Set Firewall/Router PortsEnsure Management Console Has the Correct Intel AMT Support Set PasswordSelect TLS or non-TLS mode Configure Intel vPro Client BiosConfirm You Have the Latest Bios and Firmware Version Change the Intel MEBx PasswordSet Additional Intel MEBx Parameters Select an IP Addressing SchemeDiscovery With the LANDesk Agent Installed on the Client Discovery Without the LANDesk Agent Installed on the ClientDiscover Intel vPro Clients Through the Management Console Test Intel vPro Client FunctionalityPage Updating Procedures to Include Intel AMT Features Post ConfigurationUsing Agent Presence AP Adding New DevicesSystem Defense SD Using LANDesk* Out-of-Band Monitor Amtmon FeaturesPage Process Flowchart Setup Intel vPro Enterprise Setup and Configuration FlowSQL DB Dhcp DNS Database Server Integration Set Firewall/Router Ports Open for Management TrafficSet Intel vPro Password and TLS mode in Management Console Select TLS Advanced mode or non-TLS Standard mode Configure Intel vPro Client Authentication SettingsSet Intel MEBx Password Page OEM Pre-configuration Factory State to Configured State Management console Page Page Discover Intel vPro Clients through the Management Console Test Intel vPro Client Functionality From LANDesk Network Settings o User Accounts Using LANDesk* Out-of-Band Monitor Amtmon Features Page PID Appendix a TroubleshootingPage An example of Successful Provisioning Page An example of an unsuccessful Provisioning Page Page Appendix B Glossary of Terms used in this guide

Centrino Pro, vPro specifications

Intel vPro and Centrino Pro are advanced technologies designed to enhance business computing environments, providing a blend of performance, security, and manageability. These technologies are specifically aimed at IT professionals and organizations looking to streamline their operations and protect sensitive data.

Intel vPro technology is built for today’s enterprise needs, incorporating a set of hardware and software features that allow for advanced security, remote management, and increased performance. One of the core features of Intel vPro is its Hardware Shield, which provides security at the firmware level, helping to protect against threats before they even reach the operating system. This feature enhances the overall security posture of devices while enabling IT departments to respond more effectively to potential threats.

Another prominent aspect of Intel vPro is its remote management capabilities, which include Intel Active Management Technology (AMT). AMT allows IT administrators to manage devices even when they are powered off or have a corrupted operating system. This capability significantly reduces downtime and improves productivity, as IT support can troubleshoot and resolve issues remotely without needing physical access to the machine.

Centrino Pro, on the other hand, focuses on delivering performance and power efficiency for mobile computing. It integrates Wi-Fi capabilities with advanced security features, enabling users to stay connected securely while on the move. Centrino Pro technology includes Intel's power management capabilities, which optimize battery life and enhance the performance of mobile devices.

The combination of Intel vPro and Centrino Pro offers features like Intel Trusted Execution Technology (TXT), which helps to protect virtual machines and sensitive data from attacks. Additionally, these technologies support enhanced multitasking capabilities, powered by Intel's robust processors, ensuring that business applications run smoothly and efficiently.

Both Intel vPro and Centrino Pro are designed with scalability in mind, allowing organizations to easily deploy and manage multiple devices across various locations. This scalability is an essential characteristic for businesses that require flexibility in their IT infrastructure without compromising performance or security.

In summary, Intel vPro and Centrino Pro represent a powerful suite of technologies tailored for enterprise environments. With features focused on security, remote management, and efficient mobile computing, they help organizations optimize their IT strategies and foster a secure and productive workplace.
Top Page Image Contents