Intel vPro Processor Technology Setup and Configuration for the HP Z1, Z210, Z420, Z620 and Z820 Workstations

21
Enterprise Mode AMT Setup and Configuration
Enterprise mode is for large corporate customers. A Setup and Configuration Server
(SCS) is required for Enterprise Mode Setup and Configuration. The SCS is also
known as a Provisioning Server as seen in the MEBx.
Setup and Configuration Server
A Setup and Configuration Server (SCS) is simply an application that executes over
a network performing AMT Setup and Configuration. It is required for Enterprise
mode setup and configuration.
In a PSK Setup and Configuration, both the AMT client system and the SCS must
share a set of Provisioning ID (PID) and Provisioning Passphrase (PPS). This pair
forms a Pre-Shared Key (PSK).
PIDs are 8 characters long and PPS are 32 characters. There are dashes between
every set of four characters so counting dashes PIDs are 9 characters and PPS are
40 characters. Once these PIDs and PPS are generated, they are added to the
Setup and Configuration server’s secure PSK database. This database can be
transferred to another Setup and Configuration server’s database.
The initial communication between an AMT client system and an SCS consists of
the following basic steps:
1. The AMT system sends out a “hello” message which includes the PSK over the
network.
2. The SCS receives the “hello” message and verifies the PSK.
3. If the verification passes, then the SCS begins setup and configuration.
4. Once setup and configuration completes, the original PSK is deleted from the
AMT client system and a new PSK is given.
The initial “hello” message is unencrypted. However, afterwards all communication
between the AMT client and the SCS can be encrypted with Transport Layer
Security (TLS).
There are several independent software vendors (ISV) offering Setup and
Configuration Servers on the market. SCSs currently available include:
HP Client Configuration Manager
Altiris
LANDesk
Microsoft SMS