Intel vPro Processor Technology Setup and Configuration for the HP Z1, Z210, Z420, Z620 and Z820 Workstations

Provisioning Methods

There are three methods of provisioning a system with Enterprise mode:

• Legacy

• IT TLS-PSK

• OEM TLS-PSK

Legacy

Legacy method of AMT Setup and Configuration should be executed on an isolated

network separate from the corporate network if TLS is desired. An S&CS server

would have to have a secondary network connection to Certification Authority for

TLS configuration.

Legacy AMT Setup and Configuration is done by the customer. The customer

initially receives systems in the Factory phase with AMT disabled. These systems

will need to go through AMT Setup to go from Factory to In-Setup phase.

Once the system is in In-Setup phase, the system can continue to be configured

manually or be connected to a network where it will connect with an S&CS and

begin Enterprise Mode – AMT Configuration.

The Legacy method places all of the work of AMT Setup and Configuration on the

customer. It is no touch for the OEM.

IT TLS-PSK

IT TLS-PSK AMT Setup and Configuration is usually done in the IT department of a

corporation.

The following is needed:

• Setup and Configuration Server

• Network and security infrastructure

AMT systems in the Factory phase will be given to the IT department of a company.

The IT department is responsible for AMT Setup and Configuration. The IT

department is free to use any method to enter in AMT Setup information. Once this

is done, the systems will be in Enterprise mode and in the In-Setup phase. An

S&CS will need to generate PID and PPS sets.

AMT Configuration has to occur over a network. The network can be encrypted via

Transport Layer Security Pre-Shared Key (TLS-PSK) protocol. Once the systems

connect to an S&CS, Enterprise mode Configuration will occur.

The IT TLS-PSK method places the work of AMT Setup and Configuration on the IT

departments of major corporations. They must have the personnel and infrastructure

in place for system configuration and deployment. It is no touch for the OEM