Home » HP Manuals » Desktops » HP 8000 » Manual Viewer

HP 8000 vPro Setup and Configuration for the 8000 Elite Business PC with Intel - Page 2

Introduction - elite

UPC - 884420665106

Add to My Manuals
Save this manual to your list of manuals

Page 2 highlights

Introduction The HP Compaq 8000 Elite Business PC uses Intel vPro processor technology to simplify PC management and reduce IT-related expenditures. Intel vPro processor technology is a combination of Active Management Technology (AMT) and Intel Virtualization Technology (VT), which allows for improved management of PC systems and enhanced security. Intel vPro processor technology no longer supports Virtual Appliances. This is a change from previous generations of HP Compaq dx7 Business PCs with Intel vPro processor technology. AMT provides Out-of-Band (OOB) remote access to a system regardless of the system power state or operating system condition as long as the system is connected to a power source and a network. AMT is a hardware and firmware platform resident solution relying upon the Management Engine (ME) within the Intel Q965, Q35, and Q45 Express chipsets. The following is a brief history of AMT evolution: • AMT 1.0 - Introduced with the Intel 945 chipset, but was not shipped with HP Business PCs. • AMT 2.0 - Introduced with the Intel Q965 chipset and was shipped with HP Compaq dc7700p Busi- ness PCs. • AMT 2.1 - Introduced in March 2007 and was shipped with HP Compaq dc7700p Business PCs. • AMT 2.2 - Will be available as a Web download in the Fall of 2007 with HP Compaq dc7700p Business PCs. • AMT 3.0 - Introduced with the Intel Q35 Express chipset and will be shipped with HP Compaq d7800p systems. • AMT 3.2 - Introduced with the HP Compaq dc7800p April 2008 Refresh. • AMT 5.0 - Introduced with the Intel Q45 Express chipset and shipped with HP Compaq dc7900 systems. • AMT 5.2 - Shipped on the HP Compaq 8000 Elite Business PCs. AMT 5.0 is an important update that provides new features over the existing AMT 3.x feature set. This white paper has been updated to include the new features of AMT 5.0. By default, AMT shipping on the HP Compaq 8000 Elite Business PC will be inactive. It must be set up and configured in the system before it can be used. The setup and configuration process is also known as provisioning. There are two methods of AMT set up and configuration: • Small Business (SMB) mode • Enterprise mode This white paper details Small Business mode and Enterprise mode setup and configuration for the client PC along with the usage of a Setup and Configuration Server (SCS) in Enterprise mode. Please consult with your Management Console ISV provider for details regarding installation procedures for a Setup and Configuration Server. Basic knowledge of Intel AMT and networking are required. Please refer to www.hp.com for other white papers and technical information regarding new HP Compaq 8000 Elite Business PCs and new Intel vPro processor technology. 2

Section	Page
vPro Setup and Configuration for the 8000 Elite Business PC with Intel vPro Processor Technology	1
Introduction	2
AMT Setup and Configuration	3
AMT System Phases	3
SMB Mode - AMT Setup and Configuration with MEBx	3
Password Guidelines	4
BIOS Prerequisite	4
SMB Mode - AMT Setup and Configuration Steps	5
1. Press Ctrl+P during POST to enter Manageability Engine BIOS Extension (MEBx) Setup. You can display this option only during POST if set in F10-Setup.	5
Figure 1 Intel MEBx Password Screen	5
2. Type the default password, which is admin. Passwords are case-sensitive.	5
3. Change the MEBx password. The new password must meet the Strong Password criteria defined in the Password Guidelines Section. Type the password twice for verification.	5
4. Select the Intel ME Platform Configuration. A window displays indicating that the system resets after configuration.	5
5. Select Y. ME platform configuration allows IT personnel to configure ME features such as AMT/ASF selection, power options, firmware update capabilities, and so on.	6
Figure 2 Intel ME Platform Configuration screen	6
6. Select Intel ME State Control, and then select Enabled.	6
7. Select Intel ME Firmware Local Update Qualifier.	6
8. Select Intel ME Features Control.	7
Figure 3 Intel ME Features Control Screen with AMT selected	7
9. Select Intel ME Power Control.	8
Figure 4 Intel ME Power Control Screen	8
10. Return to previous menu to exit the MEBx Setup and save ME configuration. The system will display an Intel ME Configuration Complete message and reboot. After the ME Configuration is complete, you can configure the AMT on the next boot.	9
11. Press Ctrl-P during POST to enter MEBx Setup again.	9
12. Type the MEBx password.	9
13. Select Intel AMT Configuration.	9
Figure 5 Intel AMT Configuration screen	9
14. Select Host Name, and then type a host name.	9
15. Select TCP/IP.	9
16. Select Provision Model.	11
17. Skip Un-Provision. This option returns the system to factory defaults.	11
18. Skip VLAN.	11
19. Select SOL/IDE-R.	11
20. Select Password Policy.	11
21. Select Secure Firmware Update, and then select Enabled.	12
22. Skip Set PRTC.	12
23. Select Idle Timeout.	12
24. Select Return to previous menu.	12
25. Select Exit, and then select Y to exit the MEBx Setup and save settings.	12
Intel AMT WebGUI	12
Connecting with the Intel AMT WebGUI - SMB Example	13
1. Power on an AMT system that has completed AMT Setup and Configuration.	13
2. Execute a Web browser from a separate system - a Management computer on the same subnet as the AMT computer.	13
3. Connect to the IP address specified in the MEBx and port of the AMT system.	13
4. Type the user name and password. The default username is admin and the password is what you set during AMT Setup in the MEBx.	14
Figure 6 Intel AMT WebGUI Screen	14
5. Review system information and/or make any necessary changes.	14
6. Select Exit.	14
Setup and Configuration Server	15
1. The AMT system sends out a “hello” message that includes the PSK over the network.	15
2. The SCS receives the “hello” message and verifies the PSK.	15
3. If the verification passes, then the SCS begins setup and configuration.	15
4. Once setup and configuration completes, the original PSK is deleted from the AMT client system, and a new PSK is given.	15
Setup and Configuration Server Availability	15
Enterprise Mode Setup and Configuration	16
Enterprise Mode - AMT Setup and Configuration Steps	16
1. Access the MEBx by pressing Ctrl-P during POST.	16
2. Type the default password, which is admin.	16
3. Change the MEBx password, following strong password guidelines.	16
4. Select Intel ME Platform Configuration.	16
5. In Intel ME State Control, select Enabled.	16
6. In Intel ME Firmware Local Update Qualifier, select Always Open.	16
7. Select Intel ME Features Control.	16
8. Select Intel ME Power Control.	16
9. Select Exit and save. The system displays the Intel ME Configuration Complete message, and then reboots.	16
10. Press Ctrl+P during POST to enter MEBx Setup again.	16
11. Type the MEBx password.	16
12. Select Intel AMT Configuration. The Intel AMT Configuration screen includes numerous options, which are available by scrolling down the menu.	17
Figure 7 Intel AMT Configuration Screen	17
Figure 8 Intel AMT Configuration Screen Continued	17
13. Select Host Name, and then type a host name	17
14. Select TCP/IP.	18
15. Select Provision Model.	18
16. Select Setup and Configuration.	18
Figure 9 Intel Setup and Configuration Screen	18
Figure 10 Intel TLS PSK Configuration Screen	20
17. Skip Un-Provision. This option returns the system to factory defaults. See the Return to Default section for more information about unprovisioning.	20
18. Skip VLAN.	21
19. Select SOL/IDE-R, and then select Y.	21
20. Select Password Policy.	21
21. Select Remote Firmware Update, and then select Enabled.	21
22. Skip Set PRTC.	21
23. Select Idle Timeout.	21
24. Select Return to previous menu.	22
25. Select Exit, and then select Y to exit the MEBx Setup and save settings. The system displays an Intel ME Configuration Complete message (only once) and reboots.	22
26. Turn off the system and remove power. The system is now in In-Setup Mode and is ready for deployment.	22
27. Plug the system into a power source and connect the network. Use the integrated Intel 82566DM NIC. Intel AMT does not work with any other NIC solution.	22
Provisioning Methods	24
Legacy	24
IT TLS-PSK	24
OEM TLS-PSK	24
USB Drive Key Set Up and Configuration	25
1. An IT technician inserts a USB drive key into a system with a management console.	25
2. The technician request local setup and configuration records from an S&CS through the console.	25
3. The S&CS:	25
4. The management console writes the password, PID, and PPS sets to a Setup.bin file in the USB drive key.	25
5. The technician takes the USB drive key to the staging area where new AMT platforms are located. The technician:	25
6. The system BIOS detects the USB drive key.	25
7. The system BIOS displays a message that automatic setup and configuration will occur.	26
8. MEBx processes the record.	26
9. MEBx writes a completion message to display.	26
10. The IT technician powers down the system. The system is now in In-Setup phase and is ready to be distributed to users in an Enterprise mode environment.	26
11. Repeat Step 5 if necessary (more than one system).	26
USB Drive Key Requirements	26
Remote Configuration	26
Remote Configuration: Bare-Metal vs. Delayed	27
Remote Configuration Time-outs in HP Systems	27
Remote Configuration Prerequisites	28
MEBx and Hashes	28
1. Press Ctrl+P for the MEBx, and then type the MEBx password.	28
2. Select Intel AMT Configuration.	28
3. Select Setup and Configuration.	28
4. Select TLS PKI.	28
Figure 11 Intel Remote Configuration Screen	29
1. Select Remote Configuration Enable/Disable.	29
2. Skip Manage Certificate Hashes.	29
3. Set PKI DNS Suffix. This option allows you to enter the PKI DNS Suffix of the SCS.	29
4. Select Return to the Previous Menu.	29
List of Supported CA Certificates	30
Return to Default	31
Figure 12 Intel AMT Unprovisioning Screen	31
1. Select Un-Provision, and then select the appropriate unprovision mode.	31
2. Select Return to previous menu.	31
3. Select Exit, and then select Y.	31
Full Return to Factory Defaults	32
Appendix A: Frequently Asked Questions	32
Appendix B: Power / Sleep / Global States Explained	34

Match case Limit results 1 per page

Introduction

The HP Compaq 8000 Elite Business PC uses Intel vPro processor technology to simplify PC management

and reduce IT-related expenditures. Intel vPro processor technology is a combination of Active Manage-

ment Technology (AMT) and Intel Virtualization Technology (VT), which allows for improved management

of PC systems and enhanced security.

Intel vPro processor technology no longer supports Virtual Appliances. This is a change from previous

generations of HP Compaq dx7 Business PCs with Intel vPro processor technology.

AMT provides Out-of-Band (OOB) remote access to a system regardless of the system power state or oper-

ating system condition as long as the system is connected to a power source and a network. AMT is a

hardware and firmware platform resident solution relying upon the Management Engine (ME) within the

Intel Q965, Q35, and Q45 Express chipsets.

The following is a brief history of AMT evolution:

•

AMT 1.0 - Introduced with the Intel 945 chipset, but was not shipped with HP Business PCs.

•

AMT 2.0 - Introduced with the Intel Q965 chipset and was shipped with HP Compaq dc7700p Busi-

ness PCs.

•

AMT 2.1 - Introduced in March 2007 and was shipped with HP Compaq dc7700p Business PCs.

•

AMT 2.2 - Will be available as a Web download in the Fall of 2007 with HP Compaq dc7700p

Business PCs.

•

AMT 3.0 - Introduced with the Intel Q35 Express chipset and will be shipped with HP Compaq

d7800p systems.

•

AMT 3.2 - Introduced with the HP Compaq dc7800p April 2008 Refresh.

•

AMT 5.0 - Introduced with the Intel Q45 Express chipset and shipped with HP Compaq dc7900 sys-

tems.

•

AMT 5.2 – Shipped on the HP Compaq 8000 Elite Business PCs.

AMT 5.0 is an important update that provides new features over the existing AMT 3.x feature set. This

white paper has been updated to include the new features of AMT 5.0.

By default, AMT shipping on the HP Compaq 8000 Elite Business PC will be inactive. It must be set up

and configured in the system before it can be used. The setup and configuration process is also known as

provisioning. There are two methods of AMT set up and configuration:

•

Small Business (SMB) mode

•

Enterprise mode

This white paper details Small Business mode and Enterprise mode setup and configuration for the client

PC along with the usage of a Setup and Configuration Server (SCS) in Enterprise mode. Please consult

with your Management Console ISV provider for details regarding installation procedures for a Setup and

Configuration Server.

Basic knowledge of Intel AMT and networking are required.

Please refer to

www.hp.com

for other white papers and technical information regarding new HP Com-

paq 8000 Elite Business PCs and new Intel vPro processor technology.