Summary of the content on the page No. 1
Intel® vPro™ and Intel®
Guide
Intel® Centrino® with vPro™ Technology
Intel® Core™2 Processor with vPro™ Technology
Centrino® Pro
Processor
Technology Quick
Start Guide
Based on Intel® Active Management Technology and LANDesk®
Management Suite 8.8
Version 1.8
October 2008
Summary of the content on the page No. 2
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Contents Preface.................................................................................................................................3 Intended Audience....................................................................................................................................................................................3 What This Document Contains .............................................
Summary of the content on the page No. 3
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Preface This document provides the high level steps required to deploy desktop and notebook PCs with Intel® vPro™ technology. It does not provide step-by-step procedures for completing those high level steps, but instead provides links to more detailed information where such step-by-step procedures may be found. Intended Audience This Quick Start Guide is intended for Information Technology (IT) professionals
Summary of the content on the page No. 4
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Process Overview 1 Intel® Active Management Technology (Intel® AMT) provides significant flexibility in order to meet the needs of various customer environments. This flexibility requires that customers make a number of decisions when planning and implementing their deployment of Intel AMT-enabled systems. The overall deployment process is shown below: • Install the LANDesk Management System (LDMS) agent on eac
Summary of the content on the page No. 5
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Section 1: Deciding Which Provisioning Mode to Use Before starting the deployment, you must decide which provisioning mode to use: SMB or Enterprise. Note: SMB mode, which stands for “Small-Medium Business,” is also known as “Basic” mode, and Enterprise mode can be divided into “Standard” and “Advanced” modes, based on whether you require Transport Layer Security (TLS) certificate-based encryption for you managem
Summary of the content on the page No. 6
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Section 2 – Deploying Intel® vPro Using SMB (Basic) Mode Provisioning Process Flowchart The following picture shows the overall process flow for provisioning Intel vPro client systems in SMB mode. The steps are described in further detail in this section. 6
Summary of the content on the page No. 7
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Step 1: Configure Existing IT Infrastructure Step 1a: Choose DHCP or Static IP Addressing for Client Systems. If your IT environment requires the use of static IP addresses, be aware that the Intel AMT client must then have two IP addresses: one for the host OS and one for the Intel Management Engine (Intel ME). Use of static IP addresses also requires that the host OS and Intel ME on the client system have sepa
Summary of the content on the page No. 8
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide It is recommended that the LANDesk client agent also be installed, although it is not required. Discovery of the Intel vPro machine will differ depending on whether the client agent is installed. See Step 5: Discover Intel vPro Clients Through the Management Console on page 11 for further information. Step 3: Ensure Management Console Has the Correct Intel AMT Support The Intel vPro features included in L
Summary of the content on the page No. 9
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Step 3b: Select TLS or non-TLS mode. Under the Discovery & Provisioning portion of the dialog box you’ll find two options: • Provision in TLS mode for secure communication • Provision in non-TLS mode Since you have made the choice to use SMB mode, select “Provision in non-TLS mode,” then click Apply. Step 4: Configure Intel vPro Client BIOS Step 4a: Confirm You Have the Latest BIOS and Firmware Version
Summary of the content on the page No. 10
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide • Contain both upper and lower case Latin characters • Have at least one numeric character • Have at least one ASCII non-alphanumeric character (!, @, #, $, %, ^, &, *) Step 4d: Select an IP Addressing Scheme SMB mode supports both Static IP and Dynamic Host Protocol Configuration (DHCP). DHCP is the most commonly used scheme today and provides the easiest integration with Intel AMT. If DHCP is your choice,
Summary of the content on the page No. 11
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Step 5: Discover Intel vPro Clients Through the Management Console Discovery of the Intel vPro devices varies depending on whether the latest LANDesk client agent is loaded. Discovery Without the LANDesk Agent Installed on the Client: 1. In LANDesk, navigate to the Unmanaged Device Discovery (UDD) tab. The bottom half of the UUD tab displays the undiscovered devices, 2. On the UUD tab, click the Intel AMT
Summary of the content on the page No. 12
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide o Remote Boot Manager – Power On/Off o Remote Boot Manager using Console Redirection (Serial over LAN /SOL) and IDE Redirection For further information on testing these features, refer to the following whitepaper: • Integrating Intel® vPro™ Technology with LANDesk® Management Products http://download.intel.com/business/vpro/pdfs/landesk_whitepaper.pdf Step 6b: Test Intel AMT Client Functionality Using Int
Summary of the content on the page No. 13
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Step 7: Post Configuration Once you’ve deployed and configured your Intel vPro client machines, there are still some additional actions you should consider. Adding New Devices: As new Intel vPro clients are added to the network you will need to perform the deployment process described above to activate Intel AMT on the new devices, discover the new devices, and then add them to your management database. This
Summary of the content on the page No. 14
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Once AP starts on the client (default startup time is 6 minutes after the client is powered on), if the COLLECTOR.EXE process is killed or the LANDesk Management Agent service is stopped, an AP alert is generated. AP start and stop alerts are displayed in the LSM log, not the Intel AMT Event Log. Note: If the COLLECTOR.EXE process is killed, restart it by running RESTARTMON.EXE, which is located in the LDCLIENT
Summary of the content on the page No. 15
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide • A Kill All NICs policy which will stop all network traffic except for LANDesk management, Intel AMT, DNS, and DHCP traffic, thus isolating the client system from the network except for system management functions. Note: In LANDesk 8.8 there is no GUI to create or modify System Defense filters or policies. Currently all modifications have to be made to the XML pages used for System Defense. Once SD triggers
Summary of the content on the page No. 16
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Section 3 – Deploying Intel vPro Using Enterprise (Standard and Advanced) Mode Provisioning Process Flowchart The following picture shows the overall process flow for provisioning Intel vPro client systems in Enterprise (Standard and Advanced) mode. The steps are described in further detail in this section. 16
Summary of the content on the page No. 17
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Intel vPro Enterprise Setup and Configuration Flow Prior to executing the steps for configuring the Intel vPro components (Intel AMT and Intel ME) in Enterprise mode (either Standard or Advanced), it is first important to understand the overall flow of the Enterprise mode configuration process (recall that the main difference between Standard and Advanced is that if you provision your clients in Advanced mode, all
Summary of the content on the page No. 18
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Step 1: Configure Existing IT Infrastructure In order for an Intel vPro machine to be manageable, it must become known to the management console. The process by which this occurs is called “provisioning”. Enterprise setup (pre-provisioning) requires a series of steps that are performed on both the Intel vPro clients and the LANDesk core server in order to prepare the client for provisioning over the network by th
Summary of the content on the page No. 19
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide the system BIOS.. It.is provided to the OEM by Intel. The Intel MEBx allows you to configure settings that control the operation of the Management Engine which runs on the Intel AMT client. For more information on Intel MEBx, see the Intel Management Engine BIOS Extension User’s Guide. Step 1a: Manually register the “provision server” entry into the DNS server. Manually resister the “provision server” entry
Summary of the content on the page No. 20
Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide Step 2: Verify Intel vPro Client Windows Drivers The following Intel AMT drivers, which are digitally signed by Intel and compatible with Microsoft Windows* operating systems (including Windows 2000, Windows XP, and Windows Vista*), are required on the Intel vPro client platform. Obtain these drivers from your client system manufacturer’s driver and download support pages (most client drivers and Intel MEBx updat
