ASRock Q77M vPro Quick Start Guide - Page 10

Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Step 4: Configure Intel vPro Client Authentication Settings In Enterprise mode, configuring the authentication settings on the Intel vPro clients can be performed in either of the following three ways: • Remote Configuration (Intel AMT 3.0 or higher) - Step 4A below • OEM pre-configuration - Step 4B below • One-touch configuration (using a USB thumb drive or manual entry) - Step 4C below Step 4A: Remote Configuration (Intel AMT 3.0 or higher) - Factory State to Configured State Remote Configuration uses matching certificate hashes on the Intel vPro clients and the provisioning server to authenticate interaction between the clients and the server. Once the client and server authenticate each other (i.e., the certificate hashes match), the provisioning server automatically begins provisioning the client. With Remote Configuration, you have two choices: • Use your own root certificate, if you already have one • Use one of the certificate hashes provided with Intel vPro (i.e., already on the client systems) Using your own root certificate: If you already have a root certificate on your SCS server, then you need to do one of the following: • instruct your Intel vPro client manufacturer (OEM) to place a matching certificate hash on each Intel vPro client during manufacture • manually enter the matching certificate hash using the Intel MEBX on each Intel vPro client before deployment If you instruct your OEM to load the certificate hashes onto your Intel vPro clients, the clients will already have a certificate hash that matches the existing root certificate on your provisioning server when they arrive. This will allow Intel vPro clients to establish a secure communication channel to exchange the certificate information to ensure the authenticity of the Intel vPro clients. But the provisioning process still depends on the Intel vPro Technology Activator to initiate the process. The Intel® vPro™ Technology Activator Utility is the next generation of the Remote Configuration tool. A Windows executable that runs locally on an Intel AMT enabled platform, the Activator does the following: • Simplify the process of configuring the Intel vPro systems via Intel SCS • Facilitate initial Intel AMT configuration or policy change • Address the following scenarios: o Intel vPro failure to find the Setup and Configuration server in the network o Expiration of Intel vPro 'hello' messages • The configuration server must get the parameters necessary to start the Intel vPro configuration process 10