HP Business Notebook Intel® vProTM setup and configuration 2011 Business Notebook Models - Technical white paper

3
Intel Active Management Technology (AMT) setup and
configuration
AMT must be set up and configured in a system before it can be used. AMT setup involves the
necessary steps to enable AMT, such as setting up the system for AMT mode and enabling network
connectivity. It is generally performed only once for the lifetime of the system. When AMT is enabled,
it can be discovered by management software over a network.
AMT configuration sets up all the other AMT options not covered in AMT setup, such as enabling
the system for Serial-Over-LAN (SOL) or IDE-Redirect (IDE-R). Settings modified in the configuration
phase can be changed many times over the course of a system’s lifespan. Changes can be made
to the system locally or through a management console.
AMT system phases
There are three Phases of AMT setup and configuration:
 Factory
 In-Setup
 Operational
The Factory phase is the initial stage as the system comes from the factory. No AMT Setup and
Configuration has been done. The only way to access AMT in Factory phase is through the MEBx.
This phase will end for manual mode systems once the default password has been changed.
Enterprise mode systems also require the Provisioning ID (PID) and Provisioning Passphrase (PPS) to be
set.
The In-Setup phase is the next stage, where most AMT options are set. This can be a manual
procedure or an automated procedure with a Setup and Configuration Server.
The Operational phase is the final stage. AMT is fully set up and configured in the system and
ready for normal use.
Manual (SMB) mode – AMT Setup and Configuration with MEBx
Manual mode is for customers who do not have independent software vendors (ISV) management
consoles or the necessary network and security infrastructures to use encrypted Transport Layer
Security (TLS). Manual mode AMT setup and configuration is a manual process done through the Intel
ME BIOS Extension (MEBx).
Manual mode is the easiest to implement since it does not require much infrastructure, but it is the
least secure since all network traffic is not encrypted. HP recommends that this be done in a closed
network.
IMPORTANT
The MEBx is an option ROM module that is provided to HP by Intel
to be included in the HP system BIOS. The MEBx is not HP-specific
and contains options that are not used by HP. If an option is not
used by HP, ignore it and do not modify it from its default state.