Intel vPro, Centrino Pro quick start OEM Pre-configuration Factory State to Configured State

Page 23

Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide

Skip to Step 5: Discover Intel vPro Clients through the Management Console, on page 27.

Note: You can also test Remote Configuration using a LANDesk generated certificate. The appropriate server certificates are already in place. However, the client hash needs to be placed into the Intel ME BIOS on the Intel AMT 3.0 client. The client hash is automatically generated and stored at the beginning of the AMTDiscService.log file. It will look something like this:

Fri, 30 Nov 2007

11:30:37 InitInstance()

Fri, 30 Nov 2007

11:30:37 LANDesk(R) Intel AMT Provisioning Service

Fri, 30 Nov 2007

11:30:45 sha1 hash: (32A1-F117-AB25-0E1B-482B-7EFE-C0BE-92A7-B090-

D416)

 

 

Fri, 30

Nov 2007

11:30:45 md5 hash: (D29A-E72B-1029-846C-CE50-4C52-82EC-8F24)

Fri, 30

Nov 2007

11:31:01 Hash added to DB

Fri, 30

Nov 2007

11:31:01 Server listens for incoming connections.

The administrator will need to place the sha1 hash in the ME BIOS on the client.

For further detailed information on obtaining and configuring certificates see file Installing VeriSign Certificate for Landesk 8.8.pdf at web site http://communities.intel.com/docs/DOC-1639.

You can set several Intel ME and Intel AMT parameters in the LANDesk Management Suite (LDSM), just as you would manually in the Intel MEBx directly on the individual client. Intel vPro parameters set in the management console are applied to all Intel vPro machines being provisioned.

Step 4B: OEM Pre-configuration – Factory State to Configured State

Most OEMs are willing to provide the service of changing the Intel vPro client from factory state to setup state by entering the password and client authentication information into the Intel MEBx on each client system for you. This often requires an additional fee to the OEM. This method is most useful when an Intel vPro client machines are to be delivered directly to the end user from the manufacturer.

The authentication information (security keys) can be provided to the OEM for loading into the client system’s BIOS (via the Intel MEBx), or the OEM could provide you with a list of keys they generated. The keys must match between the Intel vPro machines and the management console. The management consoles have an option to import and export keys to facilitate this transaction.

If you ordered your Intel vPro client systems pre-configured with Intel MEBx password and client authentication information already loaded by the OEM, then they are already in a Setup state. When you connect the client systems to the network and power them on they will automatically authenticate themselves with the provisioning server and provisioning will occur (assuming you performed Steps 1-3 above). Then they will be in a Configured state, ready to be discovered and managed by the

23

Image 23
Contents Guide Centrino Pro Processor Technology Quick Start GuideContents What This Document Contains PrefaceIntended Audience Process Overview Where do I go from here? Deciding Which Provisioning Mode to UseProcess Flowchart Deploying Intel vPro Using SMB Basic Mode ProvisioningSet Firewall/Router Ports Configure Existing IT InfrastructureVerify Intel vPro Client Windows Drivers Choose Dhcp or Static IP Addressing for Client SystemsEnsure Management Console Has the Correct Intel AMT Support Set PasswordChange the Intel MEBx Password Configure Intel vPro Client BiosSelect TLS or non-TLS mode Confirm You Have the Latest Bios and Firmware VersionSet Additional Intel MEBx Parameters Select an IP Addressing SchemeTest Intel vPro Client Functionality Discovery Without the LANDesk Agent Installed on the ClientDiscovery With the LANDesk Agent Installed on the Client Discover Intel vPro Clients Through the Management ConsolePage Adding New Devices Post ConfigurationUpdating Procedures to Include Intel AMT Features Using Agent Presence APSystem Defense SD Using LANDesk* Out-of-Band Monitor Amtmon FeaturesPage Process Flowchart Setup Intel vPro Enterprise Setup and Configuration FlowSQL DB Dhcp DNS Database Server Integration Set Firewall/Router Ports Open for Management TrafficSet Intel vPro Password and TLS mode in Management Console Select TLS Advanced mode or non-TLS Standard mode Configure Intel vPro Client Authentication SettingsSet Intel MEBx Password Page OEM Pre-configuration Factory State to Configured State Management console Page Page Discover Intel vPro Clients through the Management Console Test Intel vPro Client Functionality From LANDesk Network Settings o User Accounts Using LANDesk* Out-of-Band Monitor Amtmon Features Page PID Appendix a TroubleshootingPage An example of Successful Provisioning Page An example of an unsuccessful Provisioning Page Page Appendix B Glossary of Terms used in this guide

Centrino Pro, vPro specifications

Intel vPro and Centrino Pro are advanced technologies designed to enhance business computing environments, providing a blend of performance, security, and manageability. These technologies are specifically aimed at IT professionals and organizations looking to streamline their operations and protect sensitive data.

Intel vPro technology is built for today’s enterprise needs, incorporating a set of hardware and software features that allow for advanced security, remote management, and increased performance. One of the core features of Intel vPro is its Hardware Shield, which provides security at the firmware level, helping to protect against threats before they even reach the operating system. This feature enhances the overall security posture of devices while enabling IT departments to respond more effectively to potential threats.

Another prominent aspect of Intel vPro is its remote management capabilities, which include Intel Active Management Technology (AMT). AMT allows IT administrators to manage devices even when they are powered off or have a corrupted operating system. This capability significantly reduces downtime and improves productivity, as IT support can troubleshoot and resolve issues remotely without needing physical access to the machine.

Centrino Pro, on the other hand, focuses on delivering performance and power efficiency for mobile computing. It integrates Wi-Fi capabilities with advanced security features, enabling users to stay connected securely while on the move. Centrino Pro technology includes Intel's power management capabilities, which optimize battery life and enhance the performance of mobile devices.

The combination of Intel vPro and Centrino Pro offers features like Intel Trusted Execution Technology (TXT), which helps to protect virtual machines and sensitive data from attacks. Additionally, these technologies support enhanced multitasking capabilities, powered by Intel's robust processors, ensuring that business applications run smoothly and efficiently.

Both Intel vPro and Centrino Pro are designed with scalability in mind, allowing organizations to easily deploy and manage multiple devices across various locations. This scalability is an essential characteristic for businesses that require flexibility in their IT infrastructure without compromising performance or security.

In summary, Intel vPro and Centrino Pro represent a powerful suite of technologies tailored for enterprise environments. With features focused on security, remote management, and efficient mobile computing, they help organizations optimize their IT strategies and foster a secure and productive workplace.