Intel Configure Existing IT Infrastructure, Verify Intel vPro Client Windows Drivers

Page 7

Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide

Step 1: Configure Existing IT Infrastructure

Step 1a: Choose DHCP or Static IP Addressing for Client Systems.

If your IT environment requires the use of static IP addresses, be aware that the Intel AMT client must then have two IP addresses: one for the host OS and one for the Intel Management Engine (Intel ME). Use of static IP addresses also requires that the host OS and Intel ME on the client system have separate host (computer) names.

DHCP is recommended if it is supported in your IT environment. This allows the Intel AMT client to share a single IP address and hostname with the client OS. If static IP addressing is required for some applications, use reserved addresses for those clients that require a static IP address. This allows the application that requires a static IP address to meet its requirements, but allows Intel AMT to use one IP address and hostname instead of two.

If using DHCP, configure DHCP to support Option 81 so that the client provides its fully qualified domain name (FQDN) to the DHCP server, as well as instructions on how the DHCP server should process DNS updates for the client. Option 15 should also be enabled in the DHCP Scope Options to allow the DNS to resolve host queries after IP address changes.

Step 1b: Set Firewall/Router Ports

Set Firewall/Router Ports 16992 and 16994 to “open” for Intel AMT management traffic.

Step 2: Verify Intel vPro Client Windows Drivers

The following Intel AMT drivers, which are digitally signed by Intel and compatible with Microsoft Windows* operating systems (including Windows 2000, Windows XP, and Windows Vista*), are required on the Intel AMT client platform. Obtain these drivers from your client system manufacturer’s driver and download support pages (most client drivers and Intel MEBx updates are contained on the same support web page by the OEM).

•Intel® Management Engine Interface (Intel MEI) driver -- Provides a secure local communications interface between the host operating system and the Intel ME via the Intel MEI.

•Serial-over-LAN (SoL) driver -- Enables a COM port for VT100 or ANSI remote sessions prior to graphic interface when the operating system loads. You can view and send commands to a remote client prior to the operating system loading, including entering into the BIOS, viewing POST, etc.

•Local Management Service (LMS) driver –Provides an interface enabling local management software agents to communicate with the Intel Management Engine using the same high-level protocols as those used for remote management (e.g. XML, SOAP). When first loaded, the driver will cause a pop-up to occur to confirm that Intel AMT is running. The pop-up can be disabled. As the Intel AMT firmware is updated, this driver is most likely to require a coordinated update as new features are enabled. The driver also checks for consistency of the Intel AMT hostname and the operating system host name.

7

Page 6 Page 8
Image 7
Page 6 Page 8
Contents Guide Centrino Pro Processor Technology Quick Start GuideContents Intended Audience PrefaceWhat This Document Contains Process Overview Where do I go from here? Deciding Which Provisioning Mode to UseProcess Flowchart Deploying Intel vPro Using SMB Basic Mode ProvisioningSet Firewall/Router Ports Configure Existing IT InfrastructureVerify Intel vPro Client Windows Drivers Choose Dhcp or Static IP Addressing for Client SystemsEnsure Management Console Has the Correct Intel AMT Support Set PasswordChange the Intel MEBx Password Configure Intel vPro Client BiosSelect TLS or non-TLS mode Confirm You Have the Latest Bios and Firmware VersionSet Additional Intel MEBx Parameters Select an IP Addressing SchemeTest Intel vPro Client Functionality Discovery Without the LANDesk Agent Installed on the ClientDiscovery With the LANDesk Agent Installed on the Client Discover Intel vPro Clients Through the Management ConsolePage Adding New Devices Post ConfigurationUpdating Procedures to Include Intel AMT Features Using Agent Presence APSystem Defense SD Using LANDesk* Out-of-Band Monitor Amtmon FeaturesPage Process Flowchart Setup Intel vPro Enterprise Setup and Configuration FlowSQL DB Dhcp DNS Database Server Integration Set Firewall/Router Ports Open for Management TrafficSet Intel vPro Password and TLS mode in Management Console Set Intel MEBx Password Configure Intel vPro Client Authentication SettingsSelect TLS Advanced mode or non-TLS Standard mode Page OEM Pre-configuration Factory State to Configured State Management console Page Page Discover Intel vPro Clients through the Management Console Test Intel vPro Client Functionality From LANDesk Network Settings o User Accounts Using LANDesk* Out-of-Band Monitor Amtmon Features Page PID Appendix a TroubleshootingPage An example of Successful Provisioning Page An example of an unsuccessful Provisioning Page Page Appendix B Glossary of Terms used in this guide

Centrino Pro, vPro specifications

Intel vPro and Centrino Pro are advanced technologies designed to enhance business computing environments, providing a blend of performance, security, and manageability. These technologies are specifically aimed at IT professionals and organizations looking to streamline their operations and protect sensitive data.

Intel vPro technology is built for today’s enterprise needs, incorporating a set of hardware and software features that allow for advanced security, remote management, and increased performance. One of the core features of Intel vPro is its Hardware Shield, which provides security at the firmware level, helping to protect against threats before they even reach the operating system. This feature enhances the overall security posture of devices while enabling IT departments to respond more effectively to potential threats.

Another prominent aspect of Intel vPro is its remote management capabilities, which include Intel Active Management Technology (AMT). AMT allows IT administrators to manage devices even when they are powered off or have a corrupted operating system. This capability significantly reduces downtime and improves productivity, as IT support can troubleshoot and resolve issues remotely without needing physical access to the machine.

Centrino Pro, on the other hand, focuses on delivering performance and power efficiency for mobile computing. It integrates Wi-Fi capabilities with advanced security features, enabling users to stay connected securely while on the move. Centrino Pro technology includes Intel's power management capabilities, which optimize battery life and enhance the performance of mobile devices.

The combination of Intel vPro and Centrino Pro offers features like Intel Trusted Execution Technology (TXT), which helps to protect virtual machines and sensitive data from attacks. Additionally, these technologies support enhanced multitasking capabilities, powered by Intel's robust processors, ensuring that business applications run smoothly and efficiently.

Both Intel vPro and Centrino Pro are designed with scalability in mind, allowing organizations to easily deploy and manage multiple devices across various locations. This scalability is an essential characteristic for businesses that require flexibility in their IT infrastructure without compromising performance or security.

In summary, Intel vPro and Centrino Pro represent a powerful suite of technologies tailored for enterprise environments. With features focused on security, remote management, and efficient mobile computing, they help organizations optimize their IT strategies and foster a secure and productive workplace.
Top Page Image Contents