Intel quick start Configure Intel vPro Client Authentication Settings, Set Intel MEBx Password

Page 21

Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide

Step 3a: Set Intel MEBx Password

In the LANDesk Configuration Services tool, click the Intel vPro Configuration tab and enter a strong password in the Current Intel vPro Credentials (top) portion of the screen. This is the password you will use in the future if you need to access the Intel MEBx on any individual client system after the initial provisioning process is complete. See the Intel MEBx User Guide for information on accessing and using the Intel MEBx on an Intel vPro machine.

Leave the bottom half of the screen, Provision with new Intel vPro Credentials, blank.

Step 3b: Select TLS (Advanced mode) or non-TLS (Standard mode)

In Advanced mode, Transport Layer Security (TLS) is used to provide privacy and data integrity between communicating applications. It allows for Client/Server applications to communicate in a way to prevent eavesdropping, tampering, or message forgery. With LDMS, TLS is only available in Enterprise Advanced mode provisioning with an Intel vPro machine. The LANDesk core server is used to issue the certificates to the proper trusted devices within the network.

Under the Discovery & Provisioning portion of the dialog box you’ll find two options related to encryption:

Provision in TLS mode for secure communication

Provision in non-TLS mode

If you are provisioning in Standard mode, select non-TLS mode. For Advanced mode, select TLS mode for secure communication. After making this selection, click Apply.

Step 4: Configure Intel vPro Client Authentication Settings

In Enterprise mode, configuring the authentication settings on the Intel vPro clients can be performed in either of the following three ways:

Remote Configuration (Intel AMT 3.0 or higher) – Step 4A below

OEM pre-configuration – Step 4B below

One-touch configuration (using a USB thumb drive or manual entry) – Step 4C below

Step 4A: Remote Configuration (Intel AMT 3.0 or higher) – Factory State to Configured State

Remote Configuration uses matching certificate hashes on the Intel vPro clients and the provisioning server to authenticate interaction between the clients and the server. Once the client and server authenticate each other (i.e., the certificate hashes match), the provisioning server automatically begins provisioning the client.

With Remote Configuration, you have two choices:

21

Image 21
Contents Guide Centrino Pro Processor Technology Quick Start GuideContents Preface Intended AudienceWhat This Document Contains Process Overview Where do I go from here? Deciding Which Provisioning Mode to UseProcess Flowchart Deploying Intel vPro Using SMB Basic Mode ProvisioningVerify Intel vPro Client Windows Drivers Configure Existing IT InfrastructureChoose Dhcp or Static IP Addressing for Client Systems Set Firewall/Router PortsEnsure Management Console Has the Correct Intel AMT Support Set PasswordSelect TLS or non-TLS mode Configure Intel vPro Client BiosConfirm You Have the Latest Bios and Firmware Version Change the Intel MEBx PasswordSet Additional Intel MEBx Parameters Select an IP Addressing SchemeDiscovery With the LANDesk Agent Installed on the Client Discovery Without the LANDesk Agent Installed on the ClientDiscover Intel vPro Clients Through the Management Console Test Intel vPro Client FunctionalityPage Updating Procedures to Include Intel AMT Features Post ConfigurationUsing Agent Presence AP Adding New DevicesSystem Defense SD Using LANDesk* Out-of-Band Monitor Amtmon FeaturesPage Process Flowchart Setup Intel vPro Enterprise Setup and Configuration FlowSQL DB Dhcp DNS Database Server Integration Set Firewall/Router Ports Open for Management TrafficSet Intel vPro Password and TLS mode in Management Console Configure Intel vPro Client Authentication Settings Set Intel MEBx PasswordSelect TLS Advanced mode or non-TLS Standard mode Page OEM Pre-configuration Factory State to Configured State Management console Page Page Discover Intel vPro Clients through the Management Console Test Intel vPro Client Functionality From LANDesk Network Settings o User Accounts Using LANDesk* Out-of-Band Monitor Amtmon Features Page PID Appendix a TroubleshootingPage An example of Successful Provisioning Page An example of an unsuccessful Provisioning Page Page Appendix B Glossary of Terms used in this guide

Centrino Pro, vPro specifications

Intel vPro and Centrino Pro are advanced technologies designed to enhance business computing environments, providing a blend of performance, security, and manageability. These technologies are specifically aimed at IT professionals and organizations looking to streamline their operations and protect sensitive data.

Intel vPro technology is built for today’s enterprise needs, incorporating a set of hardware and software features that allow for advanced security, remote management, and increased performance. One of the core features of Intel vPro is its Hardware Shield, which provides security at the firmware level, helping to protect against threats before they even reach the operating system. This feature enhances the overall security posture of devices while enabling IT departments to respond more effectively to potential threats.

Another prominent aspect of Intel vPro is its remote management capabilities, which include Intel Active Management Technology (AMT). AMT allows IT administrators to manage devices even when they are powered off or have a corrupted operating system. This capability significantly reduces downtime and improves productivity, as IT support can troubleshoot and resolve issues remotely without needing physical access to the machine.

Centrino Pro, on the other hand, focuses on delivering performance and power efficiency for mobile computing. It integrates Wi-Fi capabilities with advanced security features, enabling users to stay connected securely while on the move. Centrino Pro technology includes Intel's power management capabilities, which optimize battery life and enhance the performance of mobile devices.

The combination of Intel vPro and Centrino Pro offers features like Intel Trusted Execution Technology (TXT), which helps to protect virtual machines and sensitive data from attacks. Additionally, these technologies support enhanced multitasking capabilities, powered by Intel's robust processors, ensuring that business applications run smoothly and efficiently.

Both Intel vPro and Centrino Pro are designed with scalability in mind, allowing organizations to easily deploy and manage multiple devices across various locations. This scalability is an essential characteristic for businesses that require flexibility in their IT infrastructure without compromising performance or security.

In summary, Intel vPro and Centrino Pro represent a powerful suite of technologies tailored for enterprise environments. With features focused on security, remote management, and efficient mobile computing, they help organizations optimize their IT strategies and foster a secure and productive workplace.