Intel vPro Processor Technology Setup and Configuration for the HP Z1, Z210, Z420, Z620 and Z820 Workstations

33
The network interface can be re-enabled to send out Hello messages again by the
following methods:
• Restarted by a local agent.
• Partial Unprovisioning through the MEBx.
Once the network interface has been re-enabled it will send out Hello messages for
the next 6 hours as long as the ME is active and the system is connected to a
network.
Remote Configuration (RCFG) Prerequisites
RCFG requires certain prerequisites before it can be used.
1. Both the AMT system and the SCS must be on a DHCP server. The SCS must
have the name of “Provisionserver” or if not, it must have an alias in DNS, and
be on the same domain as the AMT system.
2. The AMT system must have at least one pre-programmed active root certificate
hash.
3. The SCS must have a server certificate with the proper OID or OU values.
a. OID value in the Extended Key Usage field = 2.16.840.1.113741.1. 2. 3
b. This is the unique Intel AMT OID.
c. OU value in Subject field = “Intel(R) Client Setup Certificate”
d. This OU value is case sensitive and must be entered exactly as shown.
4. In the case of a Delayed Setup and Configuration, an OS and local agent must
be installed on the AMT system.
MEBx and Hashes
AMT 7.1 has the feature in the MEBx to allow IT administrators to manually activate
a hash and to add up to three additional certificate hashes.
To enter the Remote Configuration screen in the MEBx:
1. Press CTRL-P for the MEBx and enter the MEBx password.
2. Select the Intel® AMT Configuration option.
3. Select the Setup and Configuration option.
4. Select the TLS PKI option. The Remote Configuration screen appears as shown
in Figure 28.