Intel Centrino Pro, vPro quick start Process Overview

Page 4

Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide

Process Overview

Intel® Active Management Technology1 (Intel® AMT) provides significant flexibility in order to meet the needs of various customer environments. This flexibility requires that customers make a number of decisions when planning and implementing their deployment of Intel AMT-enabled systems.

The overall deployment process is shown below:

Install the LANDesk Management System (LDMS) agent on each client system. Since you will ultimately be utilizing the LANDesk Management Suite to manage your vPro clients the LANDesk Client Agent should be installed prior to provisioning Intel vPro. You can either push the client agent from the LANDesk Management Console or in the case of the One-Touch provisioning you can pull the client agent from the LANDesk Management Console. By having the client agent installed prior to provisioning the Intel vPro client you are not subject to your DNS resolving the host name and therefore provisioning should be fairly quick and easy.

Decide which provisioning mode to use (SMB or Enterprise). This decision determines which of the subsequent sections of this guide you will use to accomplish the remaining steps (below). See Section 1 for information on deciding which provisioning mode to use.

Install or validate infrastructure components (DNS, DHCP, SQL Server, etc.).

Ensure required Windows* drivers (for SOL and IDE-R) are installed on vPro clients.

Configure your management console to manage Intel vPro clients.

Configure Intel vPro components (Intel ME and Intel AMT) in Intel® Management Engine BIOS Extension (Intel® MEBx) on Intel vPro clients.

Discover Intel vPro clients in your management console.

Test Intel vPro client management functionality in your management console.

Perform post configuration steps (IT support process changes, maintenance procedures, etc.).

For Additional Information: Most sections will have a reference to additional information. Below is the URL where you can locate the documents referenced throughout the paper.

LANDesk® - http://download.intel.com/business/vpro/pdfs/landesk_whitepaper.pdf

Note: If you decide to use Enterprise mode provisioning, the process described above can vary significantly depending on whether or not you plan to use Remote Configuration, which uses Public Key Infrastructure (PKI) to authenticate communication between the provisioning server and the Intel vPro clients, and automates some of the steps above. See the flow chart in the next section below for a visual representation of the overall provisioning process, and the various “paths” through it depending on which provisioning mode and method you choose.

1.Intel® Active Management Technology (Intel® AMT) is a hardware-based technology that facilitates remote out-of-band management of computers by use of a small secondary processor located on the motherboard.

This out of band (OOB) controller has embedded firmware that runs on the Intel® Management Engine (Intel® ME), a separate small ARC architecture processor built into either the North Bridge or NIC of the motherboard. The Intel AMT firmware is stored in the same SPI flash memory component used to store the BIOS and is generally updated along with the BIOS.

4

Image 4
Contents Centrino Pro Processor Technology Quick Start Guide GuideContents Intended Audience PrefaceWhat This Document Contains Process Overview Deciding Which Provisioning Mode to Use Where do I go from here?Deploying Intel vPro Using SMB Basic Mode Provisioning Process FlowchartConfigure Existing IT Infrastructure Verify Intel vPro Client Windows DriversChoose Dhcp or Static IP Addressing for Client Systems Set Firewall/Router PortsSet Password Ensure Management Console Has the Correct Intel AMT SupportConfigure Intel vPro Client Bios Select TLS or non-TLS modeConfirm You Have the Latest Bios and Firmware Version Change the Intel MEBx PasswordSelect an IP Addressing Scheme Set Additional Intel MEBx ParametersDiscovery Without the LANDesk Agent Installed on the Client Discovery With the LANDesk Agent Installed on the ClientDiscover Intel vPro Clients Through the Management Console Test Intel vPro Client FunctionalityPage Post Configuration Updating Procedures to Include Intel AMT FeaturesUsing Agent Presence AP Adding New DevicesUsing LANDesk* Out-of-Band Monitor Amtmon Features System Defense SDPage Process Flowchart Intel vPro Enterprise Setup and Configuration Flow SetupSQL DB Dhcp DNS Set Firewall/Router Ports Open for Management Traffic Database Server IntegrationSet Intel vPro Password and TLS mode in Management Console Set Intel MEBx Password Configure Intel vPro Client Authentication SettingsSelect TLS Advanced mode or non-TLS Standard mode Page OEM Pre-configuration Factory State to Configured State Management console Page Page Discover Intel vPro Clients through the Management Console Test Intel vPro Client Functionality From LANDesk Network Settings o User Accounts Using LANDesk* Out-of-Band Monitor Amtmon Features Page Appendix a Troubleshooting PIDPage An example of Successful Provisioning Page An example of an unsuccessful Provisioning Page Page Appendix B Glossary of Terms used in this guide