Dell Precision M4400 Intel® AMT v5.0 Administrator's Guide
Dell Precision M4400 Manual
View all Dell Precision M4400 manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell Precision M4400 manual content summary:
- Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 1
--SMB Mode System Deployment Operating System Drivers Management Intel AMT Web GUI AMT Redirection (SOL/IDE-R) AMT Redirection Overview Troubleshooting Troubleshooting If you purchased a DELL™ n Series computer, any references in this document to Microsoft® Windows® operating systems are not - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 2
whether the computer is turned on or off - Intel AMT uses information stored in nonvolatile system memory to access the computer. The computer can even be accessed while it is powered off (also called out-of-band or OOB access). Remotely repair systems even after operating system failures - In the - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 3
networking mode that supports Transport Layer Security (TLS) and requires a configuration service. Enterprise mode allows IT administrators to set up and configure Intel AMT securely for remote management. The Dell™ computer is defaulted to Enterprise mode when it leaves the factory. The mode can - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 4
Configuration service - manually and is ready to use with the Intel AMT Web GUI. Intel AMT Setup and Configuration States The act of setting up and configuring Intel AMT is also known as provisioning. An Intel AMT capable computer can be in one of three setup and configuration states: Factory-default - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 5
a desk-side visit with a specially formatted USB thumb drive as detailed in the Configuration Service section of this document. The SCS could use a custom certificate which was pre-programmed at the Dell factory through the Custom Factory Integration (CFI) process. Enterprise TLS-PSK Enterprise TLS - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 6
key can be manually typed into the MEBx. The SCS can create a list of custom keys, and put them onto a specially formatted USB thumb drive. Then each AMT computer retrieves a custom key from the specially formatted USB thumb drive during BIOS boot as detailed in the Configuration Service section of - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 7
can be accessed on a computer through the following steps: 1. Turn on (or restart) your computer. 2. When the blue DELL™ logo appears, press immediately. If you wait too long and the operating system logo appears, continue to wait until you see the Microsoft® Windows® desktop. Then shut - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 8
changed in order to proceed through these menus. Changing the Intel ME Password The default password is admin and is the same on all newly deployed platforms. You must change the default password before changing any feature configuration options. The new password must include the following elements - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 9
page, follow these steps: 1. Under the Management Engine BIOS Extension (MEBx) main menu, select ME Configuration. Press Intel ME State Control Intel ME Firmware Local Update Intel ME Features Control Manageability Feature Selection Intel ME Power Control Intel ME ON in Host Sleep States - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 10
can debug a computer problem without worrying about any role the ME might have played in it. Intel ME Firmware Local Update Qualifier This option on the ME Platform Configuration menu sets the policy for allowing the MEBx to be updated locally. The default setting - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 11
Intel ME Features Control The ME Features Control menu contains the following configuration selection. Manageability Feature Selection When you select the Manageability Feature Selection option on the ME Features Control menu, the ME Manageability Feature menu appears. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 12
changed from Intel AMT to None, a warning message is displayed. If the user accepts the change from Intel AMT to Power Control To comply with ENERGY STAR requirements, the Intel Management Engine can be turned off in various sleep states. Intel ME Power Control menu configures Intel ME platform power - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 13
package selected determines when the ME is turned ON. The default power package is Desktop: ON in S0. The end user administrator can choose which power package is used depending on computer usage. The power package selection page can be seen above. * Information on this page provided by Intel. Back - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 14
BIOS Extension (MEBx) main menu. This feature allows you to configure an Intel AMT capable computer to support the Intel AMT management features. You need to have a basic understanding of networking and computer technology terms, such as TCP/IP, DHCP, VLAN, IDE, DNS, subnet mask, default - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 15
Intel AMT is set to DHCP, the host name MUST be identical to the operating system machine name. TCP/IP Allows you to change the following TCP/IP configuration to determine what subnet IP address belongs to. Default Gateway address - The default gateway of the Intel Management Engine. Preferred DNS - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 16
supported (PKI only). IsDefault - Displays 'Yes' if the Hash algorithm is the default algorithm selected. Displays 'No' if the hash algorithm is not the default algorithm used (PKI only). FQDN - FQDN of the provisioning server mentioned in certificate (PKI only). Serial . The default port number is - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 17
change the active status of the certificate press the key. To delete the hash press the key. To add another key press the key. Set FQDN - Sets the fully qualified domain name for the computer. Set PKI DNS suffix - Sets the PKI DNS suffix. TLS PSK The submenu contains the settings for - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 18
options underneath are still displayed, but cannot be used until Remote Configuration is enabled. This option cannot be modified once the setup and configuration process is in process. This parameter can only be modified while the computer is in the factory default or un-provisioned state. Enabling - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 19
the customized hash. Yes - The customized hash is be marked as active. No (Default) - VA_Hash is be maintained within EPS. Deleting a Hash 1. Press in the Manage Certificate Hash screen to display the Delete this certificate hash? (Y/N) prompt. 2. This option allows deleting of the selected - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 20
are displayed to include: the hash name, the certificate hash data, and the active and default states reset the Intel AMT configuration to factory defaults. There are three types of unprovision: default values. If a PID/PPS value is present, both values are erased. The MEBx password is not changed. CMOS - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 21
on the SOL/IDER session. Serial-Over-LAN (SOL) - DISABLED support SOL, this value cannot enable it. IDE Redirection (IDE-R) - DISABLED** / ENABLED IDE-R allows the Intel AMT managed client to be booted from remote disk images at the management console. If the client system does not support - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 22
. Note: The MEBx password can always be changed via the MEBx user interface. The options are: Default Password Only - The MEBx password can be changed through the network interface if the default password has not been changed yet. During Setup and Configuration - The MEBX password can be changed - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 23
name and password are not supplied, the firmware cannot be updated. When the secure firmware update feature is enabled, you are able to update the firmware using the secure method. Secure firmware updates pass through the LMS driver. If secure and local firmware update is disabled, the user must - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 24
Set PRTC Enter PRTC in GMT (UTC) format (YYYY:MM:DD:HH:MM:SS). Valid date range is 1/1/2004 - 1/4/2021. Setting PRTC value is used for virtually maintaining PRTC during power off (G3) state. This configuration is only displayed for the Enterprise Provision Model. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 25
Idle Timeout This setting is used to enable the Intel ME Wake on LAN feature and to define the Intel ME idle timeout in M1 state. The value should be entered in minutes. The value indicates the amount of time that the Intel ME is allowed to remain idle in M1 before transitioning to the M-off state. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 26
Enable DHCP Mode Set a domain name (e.g., amt.intel.com) Provision Model Intel AMT 4.0 Mode Small Business SOL/IDE-R Enable SOL Enable IDE-R Remote FW Update Enabled Save and exit MEBx and then boot the computer to the Windows® operating system. Intel AMT in Static Mode Settings Example - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 27
192.168.0.15) Set a subnet mask (e.g., 255.255.255.0) The default gateway address is optional The preferred DNS address is optional The Alternate DNS SOL Enable IDE-R Remote FW Update Enabled Save and exit MEBx and then boot computer to the Windows operating system. * Information on this page - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 28
connection can be established from the Operating System the VPro system must have before initiating a help call from the BIOS. The BIOS must support the hot key that initiates the Intel session. These include: At the Dell splash screen press . At the Dell splash screen press for the - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 29
computers. The PPS and PID fields are completed using a file created by the configuration service saved to a USB mass storage device. MEBx interface - The IT administrator manually configures the Management Engine BIOS Extension (MEBx) settings on each Intel AMT ready computer. The PPS and PID - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 30
computers without the problems associated with manually typing in entries. USB provisioning only works if the MEBx password is set to the factory default of admin. If the password has been changed, reset it to the factory default by clearing the CMOS. The following is a typical USB drive key setup - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 31
The default console package provided is the Dell!" and must conform to the requirements listed in Configuration Service--Using a USB Device. The nature of management software it aside. 2. Open the Altiris® Dell Client Manager application by double clicking the desktop icon or through the Start menu. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 32
4. Click the to expand the Intel AMT Getting Started section. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 33
5. Click the to expand the Section 1. Provisioning section. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 34
6. Click the to expand the Basic Provisioning (without TLS) section. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 35
7. Select Step 1. Configure DNS. The notification server with an out-of-band management solution installed must be registered in DNS as "ProvisionServer." - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 36
8. Click Test on the DNS Configuration screen to verify that DNS has the ProvisionServer entry and that it resolves to the correct Intel setup and configuration server (SCS). - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 37
The IP address for the ProvisionServer and Intel SCS are now visible. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 38
9. Select Step 2. Discovery Capabilities. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 39
10. Verify that the setting is Enabled. If Disabled, click the check box next to Disabled and click Apply. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 40
11. Select Step 3. View Intel AMT Capable Computers. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 41
Any Intel AMT capable computers on the network are visible in this list. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 42
12. Select Step 4. Create Profile. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 43
13. Click the plus symbol to add a new profile. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 44
On the General tab the administrator can modify the profile name and description along with the password. The administrator sets a standard password for easy maintenance in the future. Select the manual radio button and enter a new password. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 45
enable ping responses, VLAN, WebUI, Serial over LAN, and IDE Redirection. If you are configuring Intel AMT manually, all these settings are also available type, and certificate template. The ACL (access control list) tab is used to review users already associated with this profile and to add - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 46
AMT as well as an Idle Timeout setting. It is recommended that Idle timeout is always set to 0 for optimal performance. The setting for the Power Policy tab can potentially impact a computer's ability to remain E-Star 4.0 compliant - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 47
15. Select the icon with the arrow pointing out to Export Security Keys to USB Key. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 48
16. Select the Generate keys before export radio button. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 49
17. Enter the number of keys to generate (depends on the number of computers that need to be provisioned). The default is 50. 18. The Intel ME default password is admin. Configure the new Intel ME password for the environment. 19. Click Generate. Once the keys have been created, a link appears to - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 50
the previously formatted USB device into a USB connector on the Provisioning Serverr. 21. Click the Download USB key file link to download setup.bin file to the USB device. The USB device is recognized by default; save the file to the USB device. If additional keys are needed in the future, the - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 51
a. Click Save in the File Download dialog box. b. Verify the Save in: location is directed to the USB device. Click Save. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 52
Close in the Download complete dialog box. The setup.bin file is now visible in the drive Explorer window. 22. Close the Export Security Keys to USB Key and drive explorer windows to return to the Altiris Console. 23. Take the USB device to the computer, insert the device, and turn on the computer - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 53
Press any key to continue with system boot... 24. Once complete, turn off the computer and move back to the management server. 25. Select Step 6. Configure Automatic Profile Assignments. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 54
26. Verify that the setting is enabled. In the Intel AMT 2.0+ dropdown, select the profile created previously. Configure the other settings for the environment. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 55
27. Select Step 7. Monitor Provisioning Process. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 56
The computers for which the keys were applied begin to appearing in the system list. At first the status is Unprovisioned, then the system status changes to In provisioning, and finally it changes to Provisioned at the end of the process. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 57
28. Select Step 8. Monitor Profile Assignments. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 58
The computers for which profiles were assigned appear in the list. Each computer is identified by the FQDN, UUID, and Profile Name columns. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 59
Once the computers are provisioned, they are visible under the Collections folder in All configured Intel AMT computers. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 60
Back to Contents Page - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 61
BIOS Extension (MEBx) is an optional ROM module that Intel provides to Dell™ to be included in the Dell BIOS. The MEBx has been customized for Dell . Press . Passwords are case sensitive. You must change the default password before making changes to the MEBx options. 3. Select Change Intel - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 62
password to establish Intel AMT ownership. The computer then goes from the factory-default state to the setup state. 5. Select Intel ME Configuration, and then press . ME Platform Configuration allows you to configure ME features such as power options, firmware update capabilities, and so on. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 63
6. Press when the following message appears: System resets after configuration change. Continue (Y/N). - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 64
Intel ME State Control is the next option. The default setting for this option is Enabled. Do not change this setting to Disabled. If you want to disable Intel AMT, change the Manageability Feature Selection option to None in step 9. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 65
7. Select Intel ME Firmware Local Update Qualifier. Press . 8. Then select either Always Open, Never Open, or Restricted. Press . The default setting for this option is Always Open. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 66
9. Select Intel ME Features Control, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 67
Manageability Feature Selection is the next option. This feature sets the platform management mode. The default setting is Intel AMT. Selecting the None option disables all remote management capabilities. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 68
10. Select Return to Previous Menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 69
11. Select Intel ME Power Control, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 70
Intel ME ON in Host Sleep States is the next option. The default setting is Mobile: ON in S0. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 71
12. Select Return to Previous Menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 72
13. Select Return to Previous Menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 73
14. Exit the MEBx Setup and save the ME configuration. The computer displays an Intel ME Configuration Complete message and then restarts. After the ME configuration is complete, you can configure the Intel AMT settings. Intel AMT Configuration - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 74
4. Select Host Name, and then press . 5. Type in a unique name for this Intel AMT machine, and then press . Spaces are not accepted in the host name. Make sure there is not a duplicate host name on the network. Host names can be used in place of the computer's IP for any applications - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 75
6. Select TCP/IP, and then press . 7. Press when the following message appears: [DHCP Enable] Disable DHCP (Y/N) - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 76
8. Type the domain name into the Domain name field. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 77
9. Select Provision Model from the menu, and then press . 10. Choose between an Enterprise or Small Business configuration. The default setting is Enterprise. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 78
11. Select Setup and Configuration from the menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 79
12. Select Current Provisioning Mode to display the current mode, and then press . The current provisioning mode is displayed. Press or to exit. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 80
Record from the menu, and then press . The screen displays the provision PSK/PKI record data of the computer. If the data has not been entered, the MEBX displays a message that states Provision Record not present If the data is entered, the Provision Record displays one of several messages. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 81
14. Select Provisioning Server from the menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 82
15. Type the provisioning server IP in the Provisioning server address field and press . The default setting is 0.0.0.0. This default setting works only if the DNS server has an entry that can resolve the provision server to the IP of the provisioning server. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 83
16. Type the port number in the Port number field and press . The default setting is 0. If left at the default setting of 0, the Intel AMT attempts to contact the provisioning server on port 9971. If the provisioning server is listening on a different port, enter it here. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 84
17. Select Provisioning Server FQDN from the menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 85
18. Type the fully qualified domain name (FQDN) for the provisioning server and press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 86
19. Select TLS PSK from the menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 87
20. Set PID and PPS is the next option. The PID and PPS can be input manually or by using a USB key once the SCS generates the codes. This option is for entering the provisioning ID (PID) and provisioning passphrase (PPS). PIDs - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 88
Skip the Delete PID and PPS option. This option returns the computer to factory defaults. See the "Return to Default" section for more information about unprovisioning. 21. Select Return to Previous Menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 89
22. Select TLS PKI from the menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 90
23. Select Remote Configuration Enable/Disable from the menu, and then press . This option is Enabled by default and can be Disabled if the network infrastructure does not support a Certificate Authority (CA). - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 91
Manage Certificate Hashes option is the next option. Four hashes are configured by default. Hashes can be deleted or added per customer needs. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 92
24. Select Set PKI DNS Suffix from the menu. Press . 25. Type the PKI DNS Suffix in the text field and press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 93
26. Select Return to Previous Menu, and press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 94
27. Select Return to Previous Menu, and then press . This returns you to the Intel AMT Configuration menu. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 95
Skip the Un-Provision option. This option returns the computer to factory defaults. See the "Return to Default" section for more information about unprovisioning. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 96
28. Select SOL/IDE-R, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 97
29. Press when the following message appears: [Caution] System resets after configuration changes. Continue: (Y/N) - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 98
For User Name & Password, select Enabled and then press . This option allows you to add users and passwords from the WebGUI. If the option is disabled, then only the administrator has MEBx remote access. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 99
For Serial Over LAN (SOL/IDE-R), select Enabled and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 100
For IDE Redirection, select Enabled and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 101
Password Policy is the next option. The default setting is Default Password Only. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 102
Secure Firmware Update is the next option. The default setting is Enabled. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 103
Skip Set PRTC. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 104
Idle Timeout is the next option. The default setting is 1. This timeout is applicable only when a WoL option is selected for enabling ME for the Enterprise operating mode. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 105
30. Select Return to Previous Menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 106
31. Select Exit, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 107
32. Press when the following message appears: Are you sure you want to exit? (Y/N): - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 108
The computer restarts. 33. Turn off the computer and disconnect the power cable. The computer is now in setup state and is ready for deployment. Back to Contents Page - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 109
BIOS Extension (MEBx) is an optional ROM module that Intel provides to Dell™ to be included in the Dell BIOS. The MEBx has been customized for Dell computers. Dell also supports Enter>. Passwords are case sensitive. You must change the default password before making changes to the MEBx options. 3. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 110
password to establish Intel AMT ownership. The computer then goes from the factory-default state to the setup state. 6. Select Intel ME Configuration, and then press . ME Platform Configuration allows you to configure ME features such as power options, firmware update capabilities, and so on. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 111
7. Press when the following message appears: System resets after configuration change. Continue (Y/N). - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 112
Intel ME State Control is the next option. The default setting for this option is Enabled. Do not change this setting to Disabled. If you want to disable Intel AMT, change the Manageability Feature Selection option to None later in this procedure. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 113
8. Select Intel ME Firmware Local Update and then press . 9. Select either Always Open, Never Open, or Restricted, and then press . The default setting for this option is Disabled. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 114
10. Select Intel ME Features Control, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 115
Manageability Feature Selection is the next option. This feature sets the platform management mode. The default setting is Intel AMT. Selecting the None option disables all remote management capabilities. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 116
11. Select Return to Previous Menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 117
12. Select Intel ME Power Control, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 118
Intel ME ON in Host Sleep States is the next option. The default setting is Mobile: ON in S0. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 119
13. Select Return to Previous Menu and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 120
14. Select Return to Previous Menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 121
15. Exit the MEBx Setup and save the ME configuration. The computer displays an Intel ME Configuration Complete message and then restarts. After the ME configuration is complete, you can configure the Intel AMT settings. Intel AMT Configuration - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 122
4. Select Host Name, and then press . 5. Type in a unique name for this Intel AMT machine, and then press . Spaces are not accepted in the host name. Make sure there is not a duplicate host name on the network. Host names can be used in place of the computer's IP for any applications - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 123
6. Select TCP/IP, and then press . 7. Press when the following message appears: [DHCP Enable] Disable DHCP (Y/N) - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 124
8. Type the domain name into the field. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 125
9. Select Provision Model from the menu, and then press . This allows you to choose between an Enterprise or a Small Business configuration. The default setting is Enterprise. 10. Press when the following message appears: - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 126
11. Skip the Un-Provision option. This option returns the computer to factory defaults. See the "Return to Default" section for more information about unprovisioning. 12. Select SOL/IDE-R. Press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 127
13. Press when The following message appears: [Caution] System resets after configuration changes. Continue: (Y/N) - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 128
14. Select Enabled for Username & Password, and then press . This option allows you to add users and passwords from the WebGUI. If the option is disabled, then only the administrator has MEBx remote access. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 129
15. For Serial Over LAN, select Enabled and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 130
16. For IDE Redirection, select Enabled and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 131
17. For Password Policy, select Enabled and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 132
Secure Firmware Update is the next option. The default setting is Enabled. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 133
18. Skip Set PRTC. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 134
Idle Timeout is the next option. The default setting is 1. This timeout is applicable only when a WoL option is selected for Intel ME ON in Host Sleep States screen of the process for enabling ME for the Enterprise operating mode. - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 135
19. Select Return to Previous Menu, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 136
20. Select Exit, and then press . - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 137
21. Press when the following message appears: Are you sure you want to exit? (Y/N): - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 138
22. After the computer restarts, turn off the computer and disconnect the power cable. The computer is now in setup state and is ready for deployment. Back to Contents Page - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 139
plug the computer into a power source and connect it to solution. When the computer is turned on, it computer immediately looks IP address must be manually entered into the Intel key (PSK) cipher suite if TLS is supported. The SCS uses the PID to look operational. Once in the provisioned state, - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 140
Page Operating System Drivers Within the operating system, two drivers must be installed to remove unknown devices in the Device Manager. These drivers are discussed below. SOL/LMS Driver The Intel® AMT Serial-Over-LAN (SOL) / Local Manageability Service (LMS) driver is available on support.dell.com - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 141
support is enabled by default for SMB setup and configured computers. WebGUI support Guide under Using the Web Browser Interface on page 4. Follow the steps below to connect to the Intel AMT WebGUI on a computer that has been configured and set up : 1. Turn capable computer and accesses the top level - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 142
a connection to a power source, and a network connection. Intel AMT supports Serial Over LAN (SOL, text/keyboard redirection) and IDE Redirection (IDER, CD-ROM redirection) over TCP/IP. Serial Over LAN Overview Serial Over LAN (SOL) is the ability to emulate serial port communication over a standard - Dell Precision M4400 | Intel® AMT v5.0 Administrator's Guide - Page 143
disabled, a firmware error message appears when flashing the BIOS. The firmware CANNOT be flashed to an older version or to the current version installed. The firmware flash, when available, is located on the support.dell.com site for download. Serial-Over-LAN (SOL) / IDE Redirection (IDE-R) If you
Intel® Active Management Technology v5.0
Administrator's Guide
Overview
Product Overview
Operational Modes
Setup and Configuration Overview
Provisioning Methods
Menus and Defaults
MEBx Settings Overview
ME Configuration Menu
AMT Configuration Menu
Intel Fast Call for Help
MEBx Defaults
Setup and Configuration
Methods Overview
Configuration Service--Using a USB Device
Configuration Service--USB Device Procedure
MEBx Interface--Enterprise Mode
MEBx Interface--SMB Mode
System Deployment
Operating System Drivers
Management
Intel AMT Web GUI
AMT Redirection (SOL/IDE-R)
AMT Redirection Overview
Troubleshooting
Troubleshooting
If you purchased a DELL™ n Series computer, any references in this document to Microsoft
®
Windows
®
operating systems
are not applicable.
Information in this document is subject to change without notice.
© 2008 Dell Inc. All rights reserved.
Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.
Trademarks used in this text:
Dell
,
Latitude
, and the
DELL
logo are trademarks of Dell Inc.;
Intel
is a registered trademark of Intel Corporation in
the U.S. and other countries;
Microsoft
and
Windows
are either trademarks or registered trademarks of Microsoft Corporation in the United States
and/or other countries.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products.
Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own.
October 2008
Rev. A00