Compaq dc7900 vPro Setup and Configuration for the dc7900p Business PC with In
Compaq dc7900 - Convertible Minitower PC Manual
 |
View all Compaq dc7900 manuals
Add to My Manuals
Save this manual to your list of manuals |
Compaq dc7900 manual content summary:
- Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 1
dc7900 Business PC Drive Key Set Up and Configuration 25 USB Drive HP Systems 27 Remote Configuration Prerequisites 28 MEBx and Hashes 28 List of Supported CA Certificates 30 Return to Default 31 Full Return to Factory Defaults 32 Appendix A: Frequently Asked Questions 32 Appendix B: Power - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 2
AMT shipping on the HP Compaq dc7900 Business PC will be inactive. It must be set up and configured in the system before it can be used. The setup and configuration process is also known as provisioning. There are two methods of AMT set up and configuration: • Small Business (SMB) mode • Enterprise - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 3
Setup, such as enabling the system for Serial-Over-LAN (SOL) or IDE-Redirect ( is a manual process done through the Intel ME BIOS Extension (MEBx HP by Intel to be included in the HP system BIOS. The MEBx is not HP-specific and contains options that are not used by HP. If an option is not used by HP - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 4
Prerequisite This white paper is for use with HP Compaq dc7900 Business PCs. The HP Compaq dc7900 Business PC uses the 786G1 BIOS family. For best performance and to take advantage of AMT 5.0 features, make sure HP Compaq dc7900 PCs have a BIOS revision of at least version 1.08 and a ME firmware - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 5
are in place. This white paper details HP-recommended settings for options, some of which +P during POST to enter Manageability Engine BIOS Extension (MEBx) Setup. You can dis- defined in the Password Guidelines Section. Type the password twice for verification. Change resets after configuration. 5 - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 6
ASF selection, power options, firmware update capabilities, and traffic. If there is a problem that affects the ME, it can BIOS to override the ME Firmware Locale Update option and to permit local ME firmware updates. Always Open is the default and allows for as many local updates as the system BIOS - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 7
BIOS and allows local ME firmware updates until the ME is configured. Never Open Restricted ME Firmware Local Update Local ME firmware updates Enabled allowed. Local ME firmware updates allowed. ME Firmware Local Update Local ME firmware updates default, HP Compaq dc7900 Business PCs are set - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 8
in Host Sleep States, and then select Desktop:ON in S0, S3, ME WoL in S3, S4-5, OFF After Power Loss. Default Setting = Desktop: ON in S0, Recommended Setting = Desktop: ON is S0, S3, ME WoL in S3, S4-5, OFF After Power Loss This option sets the ME power policy when the system is in a sleep - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 9
States Explained" on page 34 for an explanation of sleep/ power states. See "Appendix C: Wake-On-ME Explained" on AMT Configuration. Figure 5 Intel AMT Configuration screen 14. Select Host Name, and then type a host name. Default Setting = HPSystem, Recommended Setting = User Dependent NOTES: Spaces - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 10
the same IP address can lead to network collisions, which will cause the systems to not respond correctly. d. Select Subnet Mask, and then type a subnet mask. Default Setting = 255.255.255.0, Recommended Setting = Network Dependent Example: 255.255.255.0 e. Select Default Gateway Address, and then - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 11
is no longer available once the system is in Small Business mode. This option is only used in Enterprise Mode VLAN support. If VLAN is enabled, then you must provide the VLAN tag (label) (1-4094). VLAN support is Setting = Enabled This option enables/disables Serial Over LAN (SOL) functionality. d. - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 12
Recommended Setting = Enabled This option enables/disables the ability to remotely update the ME firmware. 22. Skip Set PRTC. Default Setting = None the ME will not go to sleep when not being used in a nonactive system. HP recommends a setting of 1, which allows the ME to go to sleep after 1 minute - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 13
• Mozilla 1.7 or newer Limited remote system management includes: • Hardware inventory • Event logging • Remote system reset • Changing of network settings • Addition of new users and passwords • Updating ME firmware WebGUI support is enabled by default for SMB Setup and Configured systems. WebGUI - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 14
4. Type the user name and password. The default username is admin and the password is what you set during AMT Setup in the MEBx. Figure 6 Intel - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 15
SCS must share a set of Provisioning ID (PID) and Provisioning Passphrase (PPS). This pair forms a Pre-Shared Key (PSK). PIDs are 8 characters and PPS are 32 characters. There are that offer Setup and Configuration Servers, including: • HP Out of Band Manager • Altiris • LANDesk • Microsoft SMS 15 - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 16
Access the MEBx by pressing Ctrl-P during POST. 2. Type the default password, which is admin. 3. Change the select Enabled. 6. In Intel ME Firmware Local Update Qualifier, select Always Open. 7. Select Intel . b. Select Intel AMT. 8. Select Intel ME Power Control. a. Select ME ON in Host Sleep States - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 17
, which are available by scrolling down the menu. Figure 7 Intel AMT Configuration Screen Figure 8 Intel AMT Configuration Screen Continued 13. Select Host Name, and then type a host name Default Setting = HPSystem, Recommended Setting = User Dependent Spaces are not accepted in the host name. 17 - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 18
Intel AMT 1.0 Mode, and then select N. Default Setting = Intel AMT 3.0 Mode, Recommended Setting = Intel AMT 3.0 Mode b. Change to Small Business, and then select N. Default Setting = Enterprise, Recommended Setting = Enterprise c. Select Return to previous menu. 16. Select Setup and Configuration - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 19
Provisioning Mode • DNS • Host Initiated • Hash Data • Hash Algorithm • Serial Number • ISDefault Bit • Time Validity Pass • FQDN • Provisioning IP • Default Setting = 0.0.0.0, Recommended Setting = Network Dependent ii. Enter Port. Default Setting = 0, Recommended Setting = 9971 This option is - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 20
Default Setting = None, Recommended Setting = Network Dependent ii. Enter Port. Default Setting = 0, Recommended Setting = 9971 This option is used by an SCS. The Admin Password, PID, and PPS can be pre-populated by HP during manufacturing. Go to the OEM TLS-PSK section for details. ii. Skip Delete - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 21
Dependent This option enables or disables VLAN support. If VLAN is enabled, then the message window indicates that the system resets after configuration. b. Select Username MEBx remote access. c. Select Serial Over LAN, and then select . 21. Select Remote Firmware Update, and then select Enabled. - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 22
when not being used in a nonactive system. HP recommends a setting of 1 which allows the any other NIC solution. When power is reapplied to the system, Server's IP address must be manually entered into the AMT system (PSK) cipher suite if TLS is supported. The Setup and Configuration server uses the - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 23
• New PPS and PID (for future Setup and Configuration) • TLS certificates • Private keys • Current date and time • HTTP Digest credentials • HTTP Negotiate credentials You can set other options depending on S&CS implementation. The system goes from In-Setup phase to Operational phase, and AMT is - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 24
system is in In-Setup phase, the system can continue to be configured manually or be connected to a network where it will connect with an S&CS the customer location. In the first stage, customers purchase systems from HP, which will AMT Setup those systems during manufacturing, bringing them to - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 25
this valuable service. USB Drive Key Set Up and Configuration You can set up and locally configure password, PID, and PPS information with a USB drive key. This feature allows an IT technician to manually setup and configure systems without the problems associated with manually typing in entries - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 26
BIOS displays a message that automatic setup and configuration will occur. a. The first available record in the Setup.bin is read into memory to display. 10. The IT technician powers down the system. The system is on the USB drive key. Remote Configuration without the need manually modify AMT options - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 27
application initiates the process by communicating with the ME through the HECI driver. This requires a functional OS and agent to be installed on the agents for Delayed remote configuration support. Remote Configuration Time-outs in HP Systems The HP Compaq dc7900 Business PCs are shipped out of the - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 28
and local agent must be installed on the AMT system. MEBx and Hashes AMT 5.0 has the feature in the MEBx to allow IT administrators to manually activate a hash and to add up to three additional certificate hashes. To enter the Remote Configuration screen in the MEBx: 1. Press Ctrl+P for the MEBx - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 29
add one is available. If hashes are available, then an option to delete one or more is available. To add a hash: a. Press Insert. b. Type a name for the hash. c. Type the fingerprint of the hash. d. Select whether this hash is active. Hashes can be made active, not active, default, or not default in - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 30
CA Certificates The following list provides supported Certificate Authorities and certificates. Not all certificates are populated in certain configurations. • VeriSign Class 3 Primary CA-G1 • End Date: 8/1/2028 • SHA1 Fingerprint: 74 2C 31 - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 31
and the default hash will be made active. It does not reset ME Configuration settings or passwords. Partial unprovisioning is available for defaults with the exception of the PID, PPS, and PKICH. It does not reset ME Configuration settings or passwords. 2. Select Return to previous menu. 3. Select - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 32
factory default by clearing CMOS. This includes resetting the password to the default "admin". This is a behavior change from the HP Compaq dc7800p Business PC, where a CMOS change only clears an outside network to a specific IP and port. Local access does not originate from an outside network. 32 - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 33
Configuration Servers? A: HP Out of Band if they offer this service. Q: Can AMT supported setting by Intel and may cause unexpected system behavior. Q: What is the default port used by the Intel WebGUI? A: The Intel WebGUI listens to port graphical representation of the ME and AMT available? A: Yes. 33 - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 34
resumes from S3, the system context remains intact because system memory was preserved and powered at all times. • S4 is the Hibernate (Microsoft terminology) or Suspend-to-Disk state. The system context (memory) is saved to the hard drive as a hibernation file. When the system resumes from S4, the - Compaq dc7900 | vPro Setup and Configuration for the dc7900p Business PC with In - Page 35
a feature that allows the ME to go into a low power state when it is not used. There are three conditions HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
 |
 |
1
vPro Setup and Configuration for the dc7900 Business PC
with Intel vPro Processor Technology
Introduction
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
AMT Setup and Configuration
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
AMT System Phases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
SMB Mode - AMT Setup and Configuration with MEBx
. . . . . . . . . . . . . . . . . . . . . . . . . . .3
SMB Mode - AMT Setup and Configuration Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Intel AMT WebGUI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Connecting with the Intel AMT WebGUI - SMB Example
. . . . . . . . . . . . . . . . . . . . . . . . .13
Setup and Configuration Server
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Setup and Configuration Server Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Enterprise Mode Setup and Configuration
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Enterprise Mode - AMT Setup and Configuration Steps
. . . . . . . . . . . . . . . . . . . . . . . . . .16
Provisioning Methods
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
Legacy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
IT TLS-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
OEM TLS-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
USB Drive Key Set Up and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
USB Drive Key Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Remote Configuration
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Remote Configuration: Bare-Metal vs. Delayed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Remote Configuration Time-outs in HP Systems
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Remote Configuration Prerequisites
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
MEBx and Hashes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
List of Supported CA Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Return to Default . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Full Return to Factory Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Appendix A: Frequently Asked Questions
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Appendix B: Power / Sleep / Global States Explained
. . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Appendix C: Wake-On-ME Explained . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35