Compaq dc7900 vPro Setup and Configuration for the dc7900p Business PC with In - Page 3
AMT Setup and Configuration
View all Compaq dc7900 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 3 highlights
AMT Setup and Configuration AMT must be set up and configured in a system before it can be used. AMT setup involves the necessary steps to enable AMT such as setting up the system for AMT mode and enabling network connectivity. This setup is generally performed only once in the lifetime of a system. When AMT is enabled, it can be discovered by management software over a network. AMT Configuration sets up all other AMT options not covered in AMT Setup, such as enabling the system for Serial-Over-LAN (SOL) or IDE-Redirect (IDE-R). Settings modified in the configuration phase can be changed many times over the course of a system's life span. Changes can be made to the system locally or through a management console. AMT System Phases An AMT system can be in one of three phases in regards to its current stage of AMT Setup and Configuration, as follows: • Factory • In-Setup • Operational The Factory phase is the initial stage in which the system has been built from the factory and no AMT setup and configuration has been done. The only way to access AMT in Factory phase is through the MEBx. This phase will end for SMB mode systems after changing the default password. Enterprise mode systems also require that you set the Provisioning ID (PID) and Provisioning Passphrase (PPS). More details about passwords, PIDs, and PPS are provided in later sections of this paper. The In-Setup phase is the next stage and is where most AMT options are set. This can be a manual or automated procedure with a Setup and Configuration Server. The Operational phase is the final stage in which AMT is fully setup and configured in the system and ready for normal use. SMB Mode - AMT Setup and Configuration with MEBx SMB mode is for customers who do not have Independent Software Vendor (ISV) management consoles, or the necessary network and security infrastructures to use encrypted Transport Layer Security (TLS). SMB mode AMT set up and configuration is a manual process done through the Intel ME BIOS Extension (MEBx). SMB mode is the easiest to implement since it does not require much infrastructure, but is the least secure since all network traffic is not encrypted. HP recommends using this process only in a closed network. NOTE: The MEBx is an option ROM module that is provided to HP by Intel to be included in the HP system BIOS. The MEBx is not HP-specific and contains options that are not used by HP. If an option is not used by HP, ignore it and do not modify from its default state. Password Guidelines MEBx passwords must meet minimum criteria. These restrictions are enforced by the MEBx to reduce vulnerability of passwords to a dictionary attack. 3