Dell Latitude D630 User Manual

Dell™ Systems Management Administrator's Guide



Notes, Notices, and Cautions

Information in this document is subject to change without notice.

©2007DellInc.Allrightsreserved.

Reproduction in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.

Intel Corporation is a contributing source of content in this document.

Trademarks used in this text: Dell and the DELL logo are trademarks of Dell Inc.; Intel and iAMT are registered trademarks of Intel Corporation; Microsoft and Windows are either
trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries.

Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell Inc. disclaims any
proprietary interest in trademarks and trade names other than its own.

October 2007 Rev. A00

About Intel® Active Management Technology

Deployment

Intel AMT Setup and Configuration Overview

Using the Intel AMT WebGUI

Intel Management Engine BIOS Extension (MEBx)

Redirecting Serial and IDE Communications

Provisioning: Setup and Configuration Completion

Troubleshooting

NOTE: A NOTE indicates important information that helps you make better use of your computer.

NOTICE: A NOTICE indicates either potential damage to hardware or loss of data and tells you how to avoid the problem.

CAUTION: A CAUTION indicates a potential for property damage, personal injury, or death.

Back to Contents Page

Deployment

Dell™ Systems Management Administrator's Guide

Once you are ready to deploy a computer to a user, plug the computer into a power source and connect it to the network. Use the integrated Intel® 82566MM
NIC. Intel Active Management Technology (iAMT®) does not work with any other NIC solution.

When the computer is turned on, it computer immediately looks for a setup and configuration server (SCS). If the computer finds this server, the Intel AMT
capable computer sends a Hello message to the server.

DHCP and DNS must be available for the setup and configuration server search to automatically succeed. If DHCP and DNS are not available, then the setup
and configuration servers (SCS) IP address must be manually entered into the Intel AMT capable computer's MEBx.

The Hello message contains the following information:

l Provisioning ID (PID)
l Universally Unique Identifier (UUID)
l IP address
l ROM and firmware (FW) version numbers

The Hello message is transparent to the end user. There is no feedback mechanism to tell you that the computer is broadcasting the message. The SCS uses
the information in the Hello message to initiate a Transport Layer Security (TLS) connection to the Intel AMT capable computer using a TLS Pre-Shared key
(PSK) cipher suite if TLS is supported.

The SCS uses the PID to look up the provisioning passphrase (PPS) in the provisioning server database and uses the PPS and PID to generate a TLS Pre­Master Secret. TLS is optional. For secure and encrypted transactions, use TLS if the infrastructure is available. If you do not use TLS, then HTTP Digest is used
for mutual authentication. HTTP Digest is not as secure as TLS. The SCS logs into the Intel AMT computer with the username and password and provisions the
following required data items:

l New PPS and PID (for future setup and configuration)
l TLS certificates
l Private keys
l Current date and time
l HTTP Digest credentials
l HTTP Negotiate credentials

The computer goes from the setup state to the provisioned state, and then Intel AMT is fully operational. Once in the provisioned state, the computer can be
remotely managed.

Back to Contents Page

Back to Contents Page

Intel® Management Engine BIOS Extension (MEBx)

Dell™ Systems Management Administrator's Guide

Intel MEBx Overview
Configuring the Intel Management Engine (ME)
Configuring Your Computer to Support Intel AMT Features
MEBx Default Settings

MEBx Overview

The Intel® Management Engine BIOS Extension (MEBx) provides platform-level configuration options for you to configure the behavior of Management Engine
(ME) platform. Options include enabling and disabling individual features and setting power configurations.

This section provides details about MEBx configuration options and constraints, if any.

All the ME Configuration setting changes are not cached in MEBx. They are note committed to ME nonvolatile memory (NVM) until you exit MEBx. Hence, if MEBx

crashes,thechangesmadeuntilthatpointareNOTgoingtobecommittedtoMENVM.

NOTE: Briscoe AMT is shipped in enterprise mode as default.

Accessing MEBx Configuration User Interface

The MEBx configuration user interface can be accessed on a computer through the following steps:

1. Turn on (or restart) your computer.

2. WhentheblueDELL™logoappears,press<Ctrl><p>immediately.

If you wait too long and the operating system logo appears, continue to wait until you see the Microsoft®Windows®operating system desktop. Then
shut down your computer and try again.

3. Type the ME password. Press <Enter>.

The MEBx screen appears as shown below.

The main menu presents three function selections:

l Intel ME Configuration
l Intel AMT Configuration
l Change Intel ME Password

The Intel ME Configuration and Intel AMT Configuration menus are discussed in the following sections. First, you must change the password before you can
proceed through these menus.

Changing the Intel ME Password

The default password is admin and is the same on all newly deployed platforms. You must change the default password before changing any feature
configuration options.

The new password must include the following elements:

l Eight characters
l One uppercase letter
l One lowercase letter
l A number
l A special (nonalphanumeric) character, such as !, $, or ; excluding the :, ", and , characters.)

The underscore ( _ ) and spacebar are valid password characters but do NOT add to the password complexity.


Configuring the Intel® Management Engine (ME)

To reach the Intel®Management Engine (ME) Platform Configuration page, follow these steps:

1. Under the Management Engine BIOS Extension (MEBx) main menu, select ME Configuration. Press <Enter>.

2. The following message appears:

System resets after configuration changes. Continue: (Y/N)

3. Press <Y>.

The ME Platform Configuration page opens. This page allows you to configure the specific functions of the ME such as features, power options, and so on.
Below are quick links to the various sections.

l Intel ME State Control
l Intel ME Firmware Local Update
l Intel ME Features Control

¡ Manageability Feature Selection
¡ LAN Controller

l Intel ME Power Control

¡ Intel ME ON in Host Sleep States

Intel ME State Control

When the ME State Control option is selected on the ME Platform Configuration menu, the ME State Control menu appears. You can disable ME to isolate
the ME computer from main platform until the end of the debugging process.

When enabled, the ME State Control option lets you disable ME to isolate the ME computer from the main platform while debugging a field malfunction. The
table below illustrates the details of the options.

In fact, the ME is not really disabled with the Disabled option. Instead, it is paused at the very early stage of its booting so the computer has no traffic
originating from the ME on any of its busses, ensuring that an you can debug a computer problem without worrying about any role the ME might have played
in it.

Intel ME Firmware Local Update

This option on the ME Platform Configuration menu sets the policy for allowing the MEBx to be updated locally. The default setting is Always Open. The other
settings available are Never Open and Restricted.

To assist with the manufacturing process as well as OEM-specific in-field firmware update processes, ME firmware provides an OEM- configurable capability that
leaves the local firmware update channel always open no matter what value you select for the ME Firmware Local Update option.

The Always Open option allows OEMs to use the ME firmware local update channel to update the ME firmware without going through MEBx every time. If you
select Always Open, the ME FW Local Update option does not appear under the ME configuration menu. The table below illustrates the detail of the options.

ME Platform State Control

Option

Description

Enabled

Enable the Management Engine on the platform

Disabled

Disable the Management Engine on the platform

Always Open qualifies the override counter and allows local ME firmware updates. The override counter is a value set in the factory that, by default, allows
local ME firmware updates. The Never Open and Restricted options disqualify the override counter and do not allow local ME firmware updates unless
explicitly permitted with the Intel ME Firmware Local Update option. Selecting Never Open or Restricted adds the Intel ME Firmware Local Update option,
which can be set to Enable or Disable. By default it is disabled.

LAN Controller

Many OEMs' platforms supply a BIOS setup option to enable or disable the integrated LAN controller. In an ME operating system with AMT or ASF (Alert
Standard Format) capabilities, the LAN controller is shared between the ME and host and must be enabled for AMT to work correctly. Disabling the controller
may unintentionally affect the ME subsystem functionality. Therefore, you should not disable the LAN controller as long as the ME uses it to provide AMT or ASF.
However, if the platform's integrated LAN controller BIOS option is set to None, then the LAN Controller option on the ME Platform Configuration menu has
Enabled and Disabled options.

When you select the LAN Controller option on the ME Platform Configuration menu when the ME feature (Intel AMT or Intel QST) is selected, the following
message displays: Please set Manageability Feature to None before changing this option. For the ME platform client, the default LAN Controller setting is

Enabled.

ME Firmware Local Update Option

Option

Description

Always
Open

The ME firmware local update channel is always enabled. A boot cycle does not change enabled to disabled.
The ME FW Local Update option can be ignored.

Never

The ME firmware local update channel is controlled by the ME FW Local Update option, which can be enabled
or disabled. A boot cycle changes enabled to disabled.

Restricted

The ME firmware local update channel is always enabled only if Intel AMT is in un-provision state. A boot cycle
does not change enabled to disabled.

Intel ME Features Control

The ME Features Control menu contains the following configuration selection.

Manageability Feature Selection

When you select the Manageability Feature Selection option on the ME Features Control menu, the ME Manageability Feature menu appears.

You can use this option to determine which manageability feature is enabled.

l ASF — Alert Standard Format. ASF is a standardized corporate assets management technology. The Intel ICH9 platform supports ASF specification 2.0.
l Intel AMT — Intel Active Management Technology. Intel AMT is an improved corporate assets management technology. Intel ICH9 platform supports

Intel AMT 2.6.

The table below explains these options.

Management Feature Select Option

Option

Description

None

Manageability Feature is not selected

Intel AMT

Intel AMT manageability feature is selected

ASF

ASF manageability feature is selected

When you change the option from Intel AMT to None, a warning that Intel AMT un-provisions automatically if you accept the change appears.

The None option has no manageability feature provided by the ME computer. In this case, the firmware is loaded (that is, ME is still enabled) but the
management applications remain disabled.

Intel ME Power Control

The ME Power Control menu configures the ME platform power-related options. It contains the following configuration selection.

ME On in Host Sleep States

When the ME ON in Host Sleep States option is selected on the ME Power Control menu, the ME in Host Sleep States menu loads.

The power package selected determines when the ME is turned ON. The default power package turns off the ME in all Sx (S3/S4/S5) states.

The end user administrator can choose which power package is used depending on computer usage. The power package selection page can be seen above.

* WoL – Wake on LAN

If the power package selected indicates OFF After Power Loss, Intel ME remains off after returning from a mechanical off (G3) state. If the power package
selected does NOT indicate OFF After Power Loss Intel ME powers the computer on (S0) briefly, then turn the computer off (S5).

Configuring Your Computer to Support Intel AMT Management Features

After you completely configure the Intel®Management Engine (ME) feature, you must reboot before configuring the Intel AMT for a clean boot. The image
below shows the Intel AMT configuration menu after a user selects the Intel AMT Configuration option from the Management Engine BIOS Extension
(MEBx) main menu. This feature allows you to configure an Intel AMT capable computer to support the Intel AMT management features.

You need to have a basic understanding of networking and computer technology terms, such as TCP/IP, DHCP, VLAN, IDE, DNS, subnet mask, default gateway,
and domain name. Explaining these terms is beyond the scope of this document.

Supported Power Packages



Power Package



1234567

S0 (Computer On)

ONONONONONONON

S3 (Suspend to RAM)

OFFONON

ME
WoL

ME
WoL

ONONS4/S5 (Suspend to disk/Soft off)

OFF

OFFONON

ME
WoL

ON

ME
WoL

ME OFF After Power Loss

NoNoNoNoNo

Yes

Yes

The Intel AMT Configuration page contains the user-configurable options listed below.

For images of these menu options, see Enterprise Mode and SMB Mode.

Menu Options

Host Name

A hostname can be assigned to the Intel AMT capable computer. This is the host name of the Intel AMT-enabled computer. If Intel AMT is set to DHCP, the host
name MUST be identical to the operating system machine name.



TCP/IP

Allows you to change the following TCP/IP configuration of Intel AMT.

l Network interface – ENABLE** / DISABLED

If the network interface is disabled, all the TCP/IP settings are no longer needed.

l DHCP Mode – ENABLE** / DISABLED

If DHCP Mode is enabled, TCP/IP settings are configured by a DHCP server.

If DHCP mode is disabled, the following static TCP/IP settings are required for Intel AMT. If a computer is in static mode it needs a separate MAC address for
the Intel Management Engine. This extra MAC address is often called the Manageability MAC (MNGMAC) address. Without a separate Manageability MAC
address, the computer can NOT be set to static mode.

l IP address – Internet address of the Intel Management Engine.
l Subnet mask – The subnet mask used to determine what subnet IP address belongs to.
l Default Gateway address – The default gateway of the Intel Management Engine.
l Preferred DNS address – Preferred domain name server address.
l Alternate DNS address – Alternate domain name server address.
l Domain name – Domain name of the Intel Management Engine.



Provisioning Server

Sets the IP address and port number (0–65535) for an Intel AMT provisioning server. This configuration only appears for Enterprise Provision Model.



Provision Model

The following provisioning models are available:

l Compatibility Mode – Intel AMT 2.6** / Intel AMT 1.0

Compatibility mode allows user to switch between Intel AMT 2.6 and Intel AMT 1.0.

l Provisioning Mode – Enterprise** / Small Business

l Host Name
l TCP/IP
l Provisioning Server
l Provision Model
l Set PID and PPS

l Un-Provision
l SOL/IDE-R
l Secure Firmware Update
l Set PRTC
l Idle Timeout

This allows you to select between small business and enterprise mode. Enterprise mode may have different security settings than small business mode.
Because of the different security settings, each of these modes requires a different process to complete the setup and configuration process.



Set PID and PPS

Setting or deleting the PID/PPS causes a partial un-provision if the setup and configuration is "In-process".

l Set PID and PPS – Sets the PID and PPS. Enter the PID and PPS in the dash format. (Ex. PID: 1234-ABCD ; PPS: 1234-ABCD-1234-ABCD-1234-ABCD-

1234-ABCD) Note - A PPS value of '0000-0000-0000-0000-0000-0000-0000-0000' does not change the setup configuration state. If this value is used
the setup and configuration state stays as "Not-started."



Un-Provision

The Un-Provision option allows you to reset the Intel AMT configuration to factory defaults. There are three types of un-provision:

l Partial Un-provision – This option resets all of the Intel AMT settings to their default values but leaves the PID/PPS. The MEBx password remains

untouched.

l Full Un-provision – This option resets all of the Intel AMT settings to their default values. If a PID/PPS value is present, both values are lost. The MEBx

password remains untouched.

l CMOS clear – This un-provision option is not available in the MEBx. This option clears all values to their default values. If a PID/PPS is present, both

valuesarelost.TheMEBxpasswordresetstothedefaultvalue(admin).Toinvokethisoption,youneedtocleartheCMOS(i.e.systemboardjumper).

SOL/IDE-R

l Username and Password – DISABLED** / ENABLED

This option provides the user authentication for SOL/IDER session. If the Kerberos protocol is used, set this option to Disabled and set the user
authentication through Kerberos. If Kerberos is not used, you have the choice to enable or disable user authentication on the SOL/IDER session.

l Serial-Over-LAN (SOL) – DISABLED** / ENABLED

SOL allows the Intel AMT managed client console input/output to be redirected to the management server console.

l IDE Redirection (IDE-R) – DISABLED** / ENABLED

IDE-R allows the Intel AMT managed client to be booted from remote disk images at the management console.



Secure Firmware Update

This option allows you to enable/disable secure firmware updates. Secure firmware update requires an administrator user name and password. If the
administrator user name and password are not supplied, the firmware cannot be updated.

When the secure firmware update feature is enabled, you are able to update the firmware using the secure method. Secure firmware updates pass through
the LMS driver.



Set PRTC

Enter PRTC in GMT (UTC) format (YYYY:MM:DD:HH:MM:SS). Valid date range is 1/1/2004 – 1/4/2021. Setting PRTC value is used for virtually maintaining PRTC
during power off (G3) state. This configuration is only displayed for the Enterprise Provision Model.



Idle Timeout

Use this setting to define the ME WoL idle timeout. When this timer expires, the ME enters a low-power state. This timeout takes effect only when one of the
ME WoL power policies is selected. Enter the value in minutes.

Intel AMT in DHCP Mode Settings Example

The table below shows a basic field settings example for the Intel AMT Configuration menu page to configure the computer in DHCP mode.

Intel AMT Configurations Example in DHCP Mode

Intel AMT Configuration Parameters

Values

Intel AMT Configuration

Select and press <Enter>.

Host Name

Example: IntelAMT
This is the same as the operating system machine name.

TCP/IP

Set the parameters as follows:

l Enable Network interface
l Enable DHCP Mode
l Set a domain name (e.g., amt.intel.com)

Provision Model

l Intel AMT 2.6 Mode
l Small Business

Save and exit MEBx and then boot the computer to the Microsoft®Windows®operating system.

Intel AMT in Static Mode Settings Example

The table below shows a basic field settings example for the Intel AMT Configuration menu page to configure the computer in static mode. The computer
requires two MAC addresses (GBE MAC address and Manageability MAC Address) to operate in static mode. If there is no Manageability MAC address, Intel
AMT cannot be set in static mode.

Save and exit MEBx and then boot computer to the Microsoft®Windows®operating system.


MEBx Default Settings

The table below lists all the default settings for the Intel®Management Engine BIOS Extension (MEBx).



Intel ME Platform Configuration Default Settings

Intel AMT Configuration Default Settings

SOL/IDE-R

l Enable SOL
l Enable IDE-R

Remote FW Update

Enabled

Intel AMT Configurations Example in Static Mode

Intel AMT Configuration Parameters

Values

Intel AMT Configuration

Select and press <Enter>

Host Name

Example: IntelAMT

TCP/IP

Set the parameters as follows:

l Enable Network interface
l Disable DHCP Mode
l Set an IP address (e.g., 192.168.0.15)
l Set a subnet mask (e.g., 255.255.255.0)
l The default gateway address is optional
l The preferred DNS address is optional
l The Alternate DNS address is optional
l Set the domain name (for example., amt.intel.com)

Provision Model

l Intel AMT 2.6 Mode
l Small Business

SOL/IDE-R

l Enable SOL
l Enable IDE-R

Remote FW Update

Enabled

Password

admin

Intel ME Platform State Control

1

Enabled *
Disabled

Intel ME Firmware Local Update

Enabled
Disabled*

Intel ME Features Control

ManageabilityFeatureSelection

None
Intel AMT *
ASF

Intel ME Power Control

IntelMEONinHostSleepStates

Mobile: ON in S0*
Mobile: ON in S0, S3/AC
Mobile: ON in S0, S3/AC, S4-5/AC
Mobile: ON in S0;ME WoL in S3/AC
Mobile: ON in S0; ME WoL in S3/AC, S4-5/AC

Host Name

TCP/IP

DisableNetworkInterface?

N

DHCPEnabled.Disable?

N

DomainName

blank2Provisioning Server

ProvisioningServerAddress

0.0.0.0

PortNumber(0-65535)

0

Provision Model

AMT2.6Mode

N

Set PID and PPS **

SetPIDandPPS**

PPS Format: 1234-ABCD-1234-ABCD-1234-ABCD-1234-ABCD

Un-Provision

3

SOL/IDE-R

*Default setting
**May cause Intel AMT partial unprovision

1

Intel ME Platform State Control is only changed for Management Engine (ME) troubleshooting.

2

In Enterprise mode, DHCP automatically loads the domain name.

3

Un-provision setting only seen if the box is provisioned.

Back to Contents Page



Username&Password

Disabled
Enabled *

SerialOverLAN

Disabled
Enabled *

IDERedirection

Disabled
Enabled *

Secure Firmware Update

Disabled
Enabled *

Set PRTC

blank

Idle Timeout

TimeoutValue(0x0-0xFFFF)

1

Back to Contents Page

About Intel® Active Management Technology

Dell™ Systems Management Administrator's Guide

Intel® Active Management Technology (Intel AMT, or iAMT®) allows companies to easily manage their networked computers. IT management can:

l Discover computing assets on a network regardless of whether the computer is turned on or off — Intel AMT uses information stored in nonvolatile

computer memory to access the computer. The computer can even be accessed while it is powered off (also called out-of-band or OOB access).

l Remotely repair computers even after operating system failures — In the event of a software or operating system failure, Intel AMT can be used to

access the computer remotely for repair purposes. IT administrators can also detect computer problems easily with the assistance of Intel AMT's out-of­band event logging and alerting.

l Protect networks from incoming threats while easily keeping software and virus protection up to date across the network

Software Support

Several independent software vendors (ISVs) are building software packages to work with Intel AMT features. This provides IT administrators many options
when it comes to remotely managing the networked computer assets within their company.

Features and Benefits


The Intel®Management Engine BIOS Extension (MEBx) is an optional ROM module provided to Dell from Intel that is included in the Dell BIOS. The MEBx has
been customized for Dell computers.

Back to Contents Page

Intel AMT

Features

Benefits

Out-of-band (OOB) access

Allows remote management of platforms regardless of power or operating system state

Remote troubleshooting and recovery

Significantly reduces desk side visits, increasing the efficiency of IT technical staff

Proactive alerting

Decreases downtime and minimizes repair times

Remote hardware and software asset tracking

Increases speed and accuracy over manual inventory tracking, reducing asset accounting costs

Third-party nonvolatile storage

Increases speed and accuracy over manual inventory tracking, reducing asset accounting cost

Back to Contents Page

Redirecting Serial and IDE Communications

Dell™ Systems Management Administrator's Guide

Intel® AMT makes it possible to redirect serial and IDE communications from a managed client to a management console regardless of the boot and power
state of the managed client. The client need only have the Intel AMT capability, a connection to a power source, and a network connection. Intel AMT supports
Serial Over LAN (SOL, text/keyboard redirection) and IDE Redirection (IDER, CD-ROM redirection) over TCP/IP.

Serial Over LAN Overview

Serial Over LAN (SOL) is the ability to emulate serial port communication over a standard network connection. SOL can be used for most management
applications where a local serial port connection is normally required.

When an active SOL session is established between an Intel AMT-enabled client and a management console using the Intel AMT redirection library, the client's
serial traffic is redirected through Intel AMT over the LAN connection and made available to the management console. Similarly, the management console may
send serial data over the LAN connection that appears to have come through the client's serial port.

IDE Redirection Overview

IDE Redirection (IDER) is capable of emulating an IDE CD drive or a legacy floppy or LS-120 drive over a standard network connection. IDER enables a
management machine to attach one of its local drives to a managed client over the network. Once an IDER session is established, the managed client can use
the remote device as if it were directly attached to one of its own IDE channels. This can be useful for remotely booting an otherwise unresponsive computer.
IDER does not support the DVD format.

For example, IDER is used to boot a client with a corrupt operating system. First, a valid boot disk is loaded into the management console disk drive. This drive
is then passed as an argument when the management console opens the IDER TCP session. Intel AMT registers the device as a virtual IDE device on the
client, regardless of its power or boot state. Both SOL and IDER may be used together since the client BIOS may need to be configured to boot from the virtual
IDE device.

Back to Contents Page

Back to Contents Page

Intel® AMT Setup and Configuration Overview

Dell™ Systems Management Administrator's Guide

Terms
Setup and Configuration States



Terms

The following is a list of important terms related to the Intel® AMT setup and configuration:

l Setup and configuration — The process that populates the Intel AMT-managed computer with usernames, passwords, and network parameters that

enable the computer to be administered remotely.

l Provisioning — The act of setting up and fully configuring Intel AMT.
l Configuration service — A third-party application that completes the Intel AMT provisioning for the Enterprise operational mode.
l Intel AMT WebGUI — A Web browser-based interface providing limited remote computer management.

l Operational modes — Intel

®

AMT can be set up for use in either Enterprise mode (for large organizations) or Small and Medium Business (SMB)

mode (also called provisioning models). Enterprise mode requires a configuration service to complete provisioning; SMB mode is set up manually, does

not require much infrastructure, and completes provisioning through the Intel ME BIOS Extension (MEBx).

l Enterprise mode — Once Intel AMT is set up in Enterprise mode, it is ready to initiate configuration of its own capabilities. When all required network

elements are available, simply connect the computer to a power source and the network, and Intel AMT automatically initiates its own configuration. The
configuration service (a third-party application) completes the process for you. Intel AMT is then ready for remote management. This configuration
typically takes only a few seconds. When Intel AMT is set up and configured, you can reconfigure the technology as needed for your business
environment.

l SMB mode — Once Intel AMT is set up in SMB mode, the computer does not have to initiate any configuration across the network. It is set up manually

and is ready to use with the Intel AMT WebGUI.

You must set up and configure Intel AMT in a computer before using it. Intel AMT setup readies the computer for Intel AMT mode and enables network
connectivity. This setup is generally performed only once in the lifetime of a computer. When Intel AMT is enabled, it can be discovered by management
software over a network.

Setup and Configuration States

An Intel AMT capable computer can be in one of three setup and configuration states:

l Factory-default state — The factory-default state is a fully unconfigured state in which security credentials are not yet established and Intel AMT

capabilities are not yet available to management applications. In the factory-default state, Intel AMT has the factory-defined settings.

l Setup state — The setup state is a partially configured state in which Intel AMT has been set up with initial networking and transport layer security (TLS)

information: an initial administrator password, the provisioning passphrase (PPS), and the provisioning identifier (PID). When Intel AMT has been set
up, Intel AMT is ready to receive Enterprise mode configuration settings from a configuration service.

l Provisioned state — The provisioned state is a fully configured state in which the Intel Management Engine (ME) has been configured with power

options, and Intel AMT has been configured with its security settings, certificates, and the settings that activate the Intel AMT capabilities. When Intel
AMT has been configured, the capabilities are ready to interact with management applications.

Methods for Completing the Provisioning Process

The computer has to be configured before the Intel AMT capabilities are ready to interact with management application. There are two methods to complete
the provisioning process (in order from least complex to most complex):

l Configuration service — A configuration service allows you to complete the provisioning process from a GUI console on their server with only one touch

on each of the Intel AMT capable computers. The PPS and PID fields are completed using a file created by the configuration service saved to a USB
device.

l MEBx interface — The IT administrator manually configures the Management Engine BIOS Extension (MEBx) settings on each Intel AMT ready computer.

The PPS and PID fields are completed by typing the 32 character and 8 character alpha-numeric keys created by the configuration service into the MEBx
interface.

Back to Contents Page

Back to Contents Page

Provisioning: Completing the Setup and Configuration Process

Dell™ Systems Management Administrator's Guide

Using a Configuration Service to Complete Provisioning
Using MEBx Interface to Complete Provisioning

The computer has to be configured before the Intel® AMT capabilities are ready to interact with the management application. Two methods are available to
complete the provisioning process (in order from least complex to most complex):

l Configuration service — A configuration service allows you to complete the provisioning process from a GUI console on their server with only one touch

on each of the Intel AMT capable computers. The PPS and PID fields are completed using a file created by the configuration service saved to a USB mass
storage device.

l MEBx interface — The IT administrator manually configures the Management Engine BIOS Extension (MEBx) settings on each Intel AMT ready computer.

The PPS and PID fields are completed by typing the 32 character and 8 character alpha-numeric keys created by the configuration service into the MEBx
interface.

Using a Configuration Service to Complete Provisioning

Using a USB Storage Device

This section discusses Intel®AMT setup and configuration using a USB storage device. You can set up and locally configure password, provisioning ID (PID),
and provisioning passphrase (PPS) information with a USB drive key. This is also called USB provisioning. USB provisioning allows you to manually set up and
configure computers without the problems associated with manually typing in entries.

USB provisioning only works if the MEBx password is set to the factory default of admin. If the password has been changed, reset it to the factory default by
clearing the CMOS. For instructions, see "System Setup" in the User's Guide for your computer.

The following is a typical USB storage device key setup and configuration procedure. For a detailed walk-through using Altiris®Dell™ClientManager(DCM),
see Configuring Intel AMT With the Dell Client Management Application.

1. An IT technician inserts a USB drive key into a computer with a management console.

2. The technician requests local setup and configuration records from a setup and configuration server (SCS) through the console.

3. The SCS does the following:

¡ Generates the appropriate passwords, PID, and PPS sets

n Stores this information in its database
n Returns the information to the management console

4. The management console writes the password, PID, and PPS sets to a setup.bin file in the USB drive key.

5. The technician takes the USB drive key to the staging area where new Intel AMT capable computers are located. The technician then does the following:

¡ If necessary, npacks and connects computers
¡ Inserts the USB drive key into a computer
¡ Turns on that computer

6. The computer BIOS detects the USB drive key.

¡ If found, the BIOS looks for a setup.bin file at the beginning of the drive key. Go to step 7.
¡ If no USB drive key or setup.bin file is found, then restart the computer. Ignore the remaining steps.

7. The computer BIOS displays a message that automatic setup and configuration will occur.

¡ The first available record in the setup.bin file is read into memory. The process accomplishes the following:

n Validates the file header record
n Locates the next available record
n If the procedure is successful, the current record is invalidated so it cannot be used again

¡ The process places the memory address into the MEBx parameter block.
¡ The process calls MEBx.

8. MEBx processes the record.

9. MEBx writes a completion message to the display.

10. The IT technician turns off the computer. The computer is now in the setup state and is ready to be distributed to users in an Enterprise mode
environment.

11. Repeat step 5 if you have more than one computer.

Refer to the management console supplier for more information on USB drive key setup and configuration.

USB Storage Device Key Requirements

The USB storage device key must meet the following requirements to be able to set up and configure Intel AMT:

l It must be greater than 16 MB.
l It must be formatted with the FAT16 file system.
l The sector size must be 1 KB.
l The USB drive key is not bootable.
l The setup.bin file must be the first file landed on the USB drive key. The USB key must not contain any other files whether hidden, deleted, or otherwise.

Configuring Intel AMT With the Dell Client Management Application

ThedefaultconsolepackageprovidedistheDell™ClientManagement(DCM)application.ThissectionprovidestheproceduretosetupandconfigureIntel®

AMT with the DCM package. As mentioned earlier in the document, several other packages are available through third-party vendors.

The computer must be configured and seen by the DNS server before you begin this process. Also, a USB storage device is required and must conform to the
requirements listed in the previous section.

The nature of management software is that it is not always dynamic or real time. In fact, sometimes if you tell a computer to do something, such as to reboot,
you may have to reboot again for it to work.

Setup and Configuration Using a USB Storage Device

1. Format a USB device with the FAT16 file system and no volume label and then set it aside.

2. Open the Altiris®Dell Client Manager application by double-clicking the desktop icon or through the Start menu.

3. Select AMT Quick Start from the left navigation menu to open the Altiris Console.

4. Click the plus (+) to expand the Intel AMT Getting Started section.

5. Click the plus (+) to expand the Section 1. Provisioning section.

6. Click the plus (+) to expand the Basic Provisioning (without TLS) section.

7. Select Step 1. Configure DNS.

The notification server with an out-of-band management solution installed must be registered in DNS as "ProvisionServer."

8. Click Test on the DNS Configuration screen to verify that DNS has the ProvisionServer entry and that it resolves to the correct Intel setup and
configuration server (SCS).

The IP address for the ProvisionServer and Intel SCS are now visible.

9. Select Step 2. Discovery Capabilities.

10. Verify that the setting is Enabled. If Disabled, click the checkbox next to Disabled and click Apply.

11. Select Step 3. View Intel AMT Capable Computers.

Any Intel AMT capable computers on the network are visible in this list.

12. Select Step 4. Create Profile.

13. Click the plus (+) to add a new profile.

14. On the General tab the administrator can modify the profile name, description, and password. The administrator sets a standard password for easy
maintenance in the future. Select the manual radio button and enter a new password.

15. The Network tab provides the option to enable ping responses, VLAN, WebUI, Serial over LAN, and IDE Redirection. If you are configuring Intel AMT
manually, all these settings are also available in the MEBx.

16. The TLS (Transport Layer Security) tab provides the ability to enable TLS. If enabled, several other pieces of information are required including the
certificate authority (CA) server name, CA common name, CA type, and certificate template.

17. The ACL (access control list) tab is used to review users already associated with this profile and to add new users and define their access privileges.

18. The Power Policy tab has configuration options to select the sleep states for Intel AMT and an Idle Timeout setting. It is recommended that Idle
timeout is always set to 1 for optimal performance.

19. Select Step 5. Generate Security Keys.

20. Select the icon with the arrow pointing out to Export Security Keys to USB Key.

21. Select the Generate keys before export radio button.

22. Enter the number of keys to generate (depends on the number of computers that need to be provisioned). The default is 50.

23. The Intel ME default password is admin. Configure the new Intel ME password for the environment.

24. Click Generate. Once the keys have been created, a link appears to the left of the Generate button.

25. Insert the previously formatted USB device into a USB connector on the ProvisioningServer.

26. Click the Download USB key file link to download setup.bin file to the USB device. The USB device is recognized by default; save the file to the USB
device.

If additional keys are needed in the future, the USB device must be reformatted before saving the setup.bin file to it.



a. Click Save in the File Download dialog box.



b. Verify the Save in: location is directed to the USB device. Click Save.



c. Click Close in the Download complete dialog box.

The setup.bin file is now visible in the drive explorer window.

27. Close the Export Security Keys to USB Key and drive explorer windows to return to the Altiris Console.

28. Take the USB device to the computer, insert the device, and turn on the computer. The USB device is recognized immediately and the following message
appears:

Continue with Auto Provisioning (Y/N)

29. Press <y>.



30. Press any key to continue with system boot...

31. Once complete, turn off the computer and move back to the management server.

32. Select Step 6. Configure Automatic Profile Assignments.

33. Verify that the setting setting is enabled. In the Intel AMT 2.0+ dropdown, select the profile created previously. Configure the other settings for the
environment.

34. Select Step 7. Monitor Provisioning Process.

The computers for which the keys were applied begin to appearing in the system list. At first the status is Unprovisioned, then the system status changes to
In provisioning, and finally it changes to Provisioned at the end of the process.

35. Select Step 8. Monitor Profile Assignments.

The computers for which profiles were assigned appear in the list. Each computer is identified by the FQDN, UUID, and Profile Name columns.

Once the computers are provisioned, they are visible under the Collections folder in All configured Intel AMT computers.

Using MEBx Interface to Complete Provisioning

Intel®AMT can be set up for either Enterprise or Small and Medium Business operational modes (also called provisioning models). Both operational modes
support dynamic and static IP networking.

If you use dynamic IP networking (DHCP), the Intel AMT host name and the operating system host name must match. You must also configure both the
operating system and Intel AMT to use DHCP as well.

If you use static IP networking, the Intel AMT IP address must be different from the operating system's IP address. Additionally, the Intel AMT hostname must
be different from the operating system's hostname.

l Enterprise mode – This mode is for large organizations. This is an advanced networking mode that supports Transport Layer Security (TLS) which

requiresaconfigurationservice.EnterprisemodeallowsITadministratorstosetupandconfigureIntelAMTsecurelyforremotemanagement.TheDell™

computer is defaulted to Enterprise mode when it leaves the factory. The mode can be changed during the setup and configuration process.

l Small Medium Business (SMB) mode – This mode is a simplified operational mode that does not support TLS and does not require a setup application.

SMB mode is for customers who do not have independent software vendor (ISV) management consoles or the necessary network and security
infrastructures to use encrypted TLS. In SMB mode, Intel AMT setup and configuration is a manual process completed through the Intel ME BIOS
Extension (MEBx). This mode is the easiest to implement since it does not require much infrastructure, but it is the least secure since all network traffic is
not encrypted.

Intel AMT Configuration sets up all other Intel AMT options not covered in Intel AMT Setup, such as enabling the computer for Serial-Over-LAN (SOL) or IDE­Redirect (IDE-R).

You can change the settings modified in the configuration phase many times over the course of a computer's life span. Changes can be made to the computer
locally or through a management console.

Enterprise Mode Provisioning Methods

There are two methods of provisioning a computer with Enterprise mode:

l Legacy
l IT TLS-PSK

Legacy

If you want Transport Layer Security (TLS), execute the legacy method of Intel AMT setup and configuration on an isolated network separate from the
corporate network. A setup and configuration server (SCS) requires a secondary network connection to a certification authority (an entity which issues digital
certificates) for TLS configuration.

Initially the computers are shipped in the factory-default state with Intel AMT ready for configuration and provisioning. These computers must go through Intel
AMT setup in order to go from the factory-default state to the setup state. Once the computer is in the setup state, you can continue to configure it manually
or connect it to a network where it connects with an SCS and begin Enterprise Mode Intel AMT configuration.

IT TLS-PSK

IT TLS-PSK Intel AMT setup and configuration is usually performed in a company's IT department. The following are required:

l Setup and configuration server
l Network and security infrastructure

Intel AMT capable computers in the factory-default state are given to the IT department, which is responsible for Intel AMT setup and configuration. The IT
department can use any method to input Intel AMT setup information, after which the computers are in Enterprise mode and in the In-Setup phase. An SCS
must generate PID and PPS sets.

Intel AMT configuration must occur over a network. The network can be encrypted using the Transport Layer Security Pre-Shared Key (TLS-PSK) protocol. Once
the computers connect to an SCS, Enterprise mode configuration occurs.

Enterprise Mode

The Intel®ManagementEngineBIOSExtension(MEBx)isanoptionalROMmodulethatIntelprovidestoDell™tobeincludedintheDellBIOS.TheMEBxhas
been customized for Dell computers.

Enterprise mode (for large corporate customers) requires a setup and configuration server (SCS). An SCS runs an application over a network that performs
Intel AMT setup and configuration. The SCS is also known as a provisioning server as seen in the MEBx. An SCS is typically provided by independent software
vendors (ISVs) and is contained within the ISV management console product. Consult with the management console supplier for more information.

To setup and configure a computer for Enterprise mode, you must enable the Management Engine for Enterprise mode and configure Intel AMT for Enterprise

mode.Forinstructions,seeME Configuration: Enabling Management Engine for Enterprise Mode and AMT Configuration: Enabling Intel AMT for Enterprise

Mode.

 MEConfiguration:EnablingManagementEngineforEnterpriseMode

To enable Intel ME configuration settings on the target platform, perform the following steps:

1. Turn on the computer and during the boot process, press <Ctrl><p> when the Dell logo screen appears to enter the MEBx application.

2. Type admin in the Intel ME Password field. Press <Enter>. Passwords are case sensitive.

You must change the default password before making changes to the MEBx options.



3. Select Change Intel ME Password. Press <Enter>. Type the new password twice for verification.

The new password must include the following elements:

l Eight characters
l One uppercase letter
l One lowercase letter
l A number
l A special (nonalphanumeric) character, such as !, $, or ; excluding the :, ", and , characters.)

The underscore ( _ ) and spacebar are valid password characters but do NOT add to the password complexity.

Change the password to establish Intel AMT ownership. The computer then goes from the factory-default state to the setup state.

4. Select Intel ME Configuration. Press <Enter>.

ME Platform Configuration allows you to configure ME features such as power options, firmware update capabilities, and so on.

5. The following message appears:

System resets after configuration change. Continue (Y/N).

Press <y>.

6. Intel ME State Control is the next option. The default setting for this option is Enabled. Do not change this setting to Disabled. If you want to disable
Intel AMT, change the Manageability Feature Selection option to None.

7. Select Intel ME Firmware Local Update. Press <Enter>.

8. Select Always Open. Press <Enter>. The default setting for this option is Disabled.

9. Select Intel ME Features Control. Press <Enter>.

10. Manageability Feature Selection is the next option. This feature sets the platform management mode. The default setting is Intel AMT.

Selecting the None option disables all remote management capabilities.

11. Select Return to Previous Menu. Press <Enter>.

12. Select Intel ME Power Control. Press <Enter>.



13. Intel ME ON in Host Sleep States is the next option. The default setting is Mobile: ON in S0.



14. Select Return to Previous Menu. Press <Enter>.

15. Select Return to Previous Menu. Press <Enter>.

16. Exit the MEBx Setup and save the ME configuration. The computer displays an Intel ME Configuration Complete message and then restarts. After the
ME configuration is complete, you can configure the Intel AMT settings. For instructions, see Intel AMT Configuration: Enabling Intel AMT for Enterprise

Mode.

 IntelAMTConfiguration:EnablingIntelAMTforEnterpriseMode

To enable Intel AMT configuration settings on the target platform, perform the following steps:

1. Turn on the computer and during the boot process, press <Ctrl><p> when the Dell logo screen appears to enter the MEBx application.

2. A prompt for the password appears. Enter the new Intel ME password.

3. Select Intel AMT Configuration. Press <Enter>.



4. Select Host Name. Press <Enter>. Then type in a unique name for this Intel AMT machine. Press <Enter>.

Spaces are not accepted in the host name. Make sure there is not a duplicate host name on the network. Host names can be used in place of the computer's
IP for any applications requiring the IP address.



5. Select TCP/IP. Press <Enter>.

The following messages appear:

l Disable Network Interface: (Y/N)

Press <n>.

If the network is disabled, then all remote AMT capabilities are disabled and TCP/IP settings are not necessary. This option is a toggle, and the next time
it is accessed you are prompted with the opposite setting.



l [DHCP Enable] Disable DHCP (Y/N)

Press <n>.



l Domain Name

Type the domain name into the field.

6. Select Provision Server from the menu. Press <Enter>.

7. Type the provisioning server IP in the Provisioning server address field and press <Enter>.

8. Type the port in the Port number field and press <ENTER>.





The following message appears:

l [Intel (R) AMT 2.6 Mode] [Enterprise] change to Small Business: (Y/N)

Press <n>.

9. Set PID and PPS is the next option. The PID and PPS can be input manually or by using a USB key once the SCS generates the codes.

This option is for entering the provisioning ID (PID) and provisioning passphrase (PPS). PIDs are eight characters and PPS are 32 characters. There are dashes
between every set of four characters, so including dashes, PIDs are nine characters and PPS are 40 characters. An SCS must generate these entries.

NOTE: Thedefaultsettingis0.0.0.0.ThisdefaultsettingworksonlyiftheDNSserverhasanentrythatcanresolvetechprovisionservertotheIPof

the provisioning server.

NOTE: Thedefaultsettingis0.Ifleftatthedefaultsettingof0,theAMTattemptstocontacttheprovisioningserveronport9971.Iftheprovisioning

server is listening on a different port, enter it here.



10. Select SOL/IDE-R. Press <Enter>.

11. The following messages appear, and require the response indicated in the following bulleted list:

l [Caution] System resets after configuration changes. Continue: (Y/N)

Press <y>.



l User name & Password

¡ Select Enabled and then press <Enter>.

This option allows you to add users and passwords from the WebGUI. If the option is disabled, then only the administrator has MEBx remote access.



l Serial Over LAN

Select Enabled and then press <Enter>.

l IDE Redirection

Select Enabled and then press <Enter>.

12. Secure Firmware Update is the next option. The default setting is Enabled.

13. Skip Set PRTC.

14. Idle Timeout is the next option. The default setting is 1. This timeout is applicable only when a WoL option is selected in step 13 of the process for
enabling ME for the Enterprise operating mode.


setting

must
be
used
in

step

13.

 

15. Select Return to Previous Menu. Press <Enter>.

16. Select Exit. Press <Enter>.

17. The following message appears:

Are you sure you want to exit? (Y/N):

Press <y>.

18. The computer restarts. Turn off the computer and disconnect the power cable. The computer is now in setup state and is ready for deployment.

SMB Mode

The Intel®ManagementEngineBIOSExtension(MEBx)isanoptionalROMmodulethatIntelprovidestoDell™tobeincludedintheDellBIOS.TheMEBxhas
beencustomizedforDell™computers.

Dell also supports setup and configuration of Intel AMT in the Small and Medium Business (SMB) mode. The only setting not required in the SMB mode is the
Set PID and PPS option. Also, the Provision Model option is set to Small Business instead of Enterprise.

TosetupandconfigureacomputerforSMBmode,youmustenabletheManagementEngineforSMBmodeandconfigureIntelAMTforSMBmode.For

instructions, see ME Configuration: Enabling Management Engine for SMB Mode and Intel AMT Configuration: Enabling Intel AMT for SMB Mode.

ME Configuration: Enabling Management Engine for SMB Mode

To enable Intel ME configuration settings on the target platform, perform the following steps:

1. Turn on the computer and during the boot process, press <Ctrl><p> when the Dell logo screen appears to enter the MEBx application.

2. Type admin in the Intel ME Passwordfield.Press<Enter>.

Passwords are case sensitive. You must change the default password before making changes to the MEBx options.



3. Select Change Intel ME Password. Press <Enter>. Type the new password twice for verification.

The new password must include the following elements:

l Eight characters
l One uppercase letter
l One lowercase letter
l A number
l A special (nonalphanumeric) character, such as !, $, or ; excluding the :, ", and , characters.)

The underscore ( _ ) and spacebar are valid password characters but do NOT add to the password complexity.

Change the password to establish Intel AMT ownership. The computer then goes from the factory-default state to the setup state.

4. Select Intel ME Configuration. Press <Enter>.

ME Platform Configuration allows you to configure ME features such as power options, firmware update capabilities, and so on.

5. The following message appears:

System resets after configuration change. Continue (Y/N).

Press <y>.

6. Intel ME State Control is the next option. The default setting for this option is Enabled. Do not change this setting to Disabled. If you want to disable
Intel AMT, change the Manageability Feature Selection option to None.

7. Select Intel ME Firmware Local Update.Press<Enter>.

8. Select Disabled. Press <Enter>. The default setting for this option is Disabled.

9. Select Intel ME Features Control. Press <Enter>.

10. Manageability Feature Selection is the next option. This feature sets the platform management mode. The default setting is Intel AMT. Selecting the
None option disables all remote management capabilities.

11. Select Return to Previous Menu. Press <Enter>.

12. Select Intel ME Power Control. Press <Enter>.



13. Intel ME ON in Host Sleep States is the next option. The default setting is Mobile: ON in S0.

14. Select Return to Previous Menu. Press <Enter>.

15. Select Return to Previous Menu. Press <Enter>.

16. Exit the MEBx Setup and save the ME configuration. The computer displays an Intel ME Configuration Complete message and then restarts. After the
ME configuration is complete, you can configure the Intel AMT settings.

Intel AMT Configuration: Enabling Intel AMT for SMB Mode

To enable Intel AMT Configuration settings on the target platform, perform the following steps:

1. Turn on the computer and during the boot process, press <Ctrl><p> when the Dell logo screen appears to enter the MEBx application.

2. A prompt for the password appears. Enter the new Intel ME password.

3. Select Intel AMT Configuration. Press <Enter>.



4. Select Host Name.Press<Enter>.

5. Then type in a unique name for this Intel AMT machine. Press <Enter>.

Spaces are not accepted in the host name. Make sure there is not a duplicate host name on the network. Host names can be used in place of the
computer's IP for any applications requiring the IP address.



6. Select TCP/IP. Press <Enter>.

7. The following messages appear and require the response indicated in the following bulleted list:

l Disable Network Interface: (Y/N)

Press <n>.

If the network is disabled, then all remote Intel AMT capabilities are disabled and TCP/IP settings are not necessary. This option is a toggle, and the
next time it is accessed you are prompted with the opposite setting.



l [DHCP Enable] Disable DHCP (Y/N)

Press <n>.



l Domain Name

Type the domain name into the field.

8. Select Provision Model from the menu. Press <Enter>.

9. The following message appears:

The following message appears:

l Change to Intel AMT 1.0 Mode: (Y/N)

Press <y>.

10. Skip the Un-Provision option. This option returns the computer to factory defaults. See Return to Default for more information about unprovisioning.

11. Select SOL/IDE-R. Press <Enter>.

12. The following messages appear and require the response indicated in the following bulleted list:

l [Caution] System resets after configuration changes. Continue: (Y/N)

Press <y>.



l User name & Password

Select Enabled and then press <Enter>.

This option allows you to add users and passwords from the WebGUI. If the option is disabled, then only the administrator has MEBx remote access.



l Serial Over LAN

Select Enabled and then press <Enter>.



l IDE Redirection

Select Enabled and then press <Enter>.

13. Secure Firmware Update is the next option. The default setting is Enabled.

14. Skip Set PRTC.

15. Idle Timeout is the next option. The default setting is 1. This timeout is applicable only when a WoL option is selected in step 13 of the process for
enabling the ME for SMB operating mode.


<

16. Select Return to Previous Menu. Press <Enter>.

17. Select Exit. Press <Enter>.

18. The following message appears:

Are you sure you want to exit? (Y/N):

Press <y>.

19. The computer restarts. Turn off the computer and disconnect the power cable. The computer is now in setup state and is ready for deployment.

Back to Contents Page

Back to Contents Page

Troubleshooting

Dell™ Systems Management Administrator's Guide

Return to Default (Un-Provisioning)

Firmware Flash
Serial-Over-LAN (SOL) and IDE Redirection (IDE-R)
Error Messages


This section describes a few basic troubleshooting steps to follow if problems are experienced with the Intel® AMT configuration.

Return to Default (Un-Provisioning)

Return to default is also known as un-provisioning. An Intel AMT setup and configured computer can be un-provisioned using the Intel AMT Configuration
screen and the Un-Provision option.

Follow the steps below to un-provision a computer:

1. Select Un-Provision and then select Full Un-provision.

Full un-provisioning is available for SMB Mode provisioned computers. This option returns all Intel AMT configuration settings to factory defaults and does
NOT reset ME configuration settings or passwords. Full and partial un-provisioning is available for Enterprise Mode provisioned computers. Partial un­provisioning returns all Intel AMT configuration settings to factory defaults with the exception of the PID and PPS. Partial un-provisioning does NOT reset
ME configuration settings or passwords.

An un-provisioning message displays after about 1 minute. After un-provisioning completes, control is passed back to the Intel AMT Configuration screen.
Provisioning Server, Set PID and PPS, and Set PRTC options are available again because the computer is set to the default Enterprise Mode.

2. Select Return to previous menu.

3. Select Exit and then press <y>. The computer restarts.



Firmware Flash

Flash the firmware to upgrade to newer versions of Intel AMT. The automatic flash feature can be disabled by selecting Disabled under the Secure Firmware
Update setting in the MEBx interface. The firmware flash, when available, is located on the support.dell.com site for download.

The firmware CANNOT be flashed to an older version or to the current version installed. The firmware flash is available on the support.dell.com site for
download.

Serial-Over-LAN (SOL) and IDE Redirection (IDE-R)

If you cannot use IDE-R and SOL, follow these steps:

1. At the initial boot screen, press <Ctrl><p> to enter the MEBx screens.

2. A prompt for the password appears. Enter the new Intel ME password.

3. Select Intel AMT Configuration.

4. Press <Enter>.

5. Select Un-Provision.

6. Press <Enter>.

7. Select Full Unprovision.

8. Press <Enter>.

9. Reconfigure the settings on the Intel AMT Configuration screen.

Error Messages

Not able to enter the MEBx on POST

The MEBx requires the DIMM A slot to be populated otherwise the following message appears upon POST and you are unable to enter the MEBx
interface.

Bad ME memory configuration.



Back to Contents Page

NOTE: DIMM A is located beneath the keyboard. For instructions on accessing this slot, refer to your User's Guide.

Back to Contents Page

Using the Intel® AMT WebGUI

Dell™ Systems Management Administrator's Guide

The Intel® AMT WebGUI is a Web browser-based interface for limited remote computer management. The WebGUI is often used as a test to determine if Intel
AMT setup and configuration was performed properly on a computer. A successful remote connection between a remote computer and the host computer
running the WebGUI indicates proper Intel AMT setup and configuration on the remote computer.

The Intel AMT WebGUI is accessible from any Web browser, such as the Internet Explorer® or Netscape® applications.

Limited remote computer management includes:

l Hardware inventory
l Event logging
l Remote computer reset
l Changing of network settings
l Addition of new users

WebGUI support is enabled by default for SMB setup and configured computers. WebGUI support for Enterprise setup and configured computers is determined
by the setup and configuration server.

Information on using the WebGUI interface is available on the Intel website at www.intel.com.

Follow the steps below to connect to the Intel AMT WebGUI on a computer that has been configured and set up:

1. Turn on an Intel AMT capable computer that has completed Intel AMT setup and configuration.

2. Launch a Web browser from a separate computer, such as a management computer on the same subnet as the Intel AMT computer.

3. Connect to the IP address specified in the MEBx and port of the Intel AMT capable computer. (example: http://ip_address:16992 or
http://192.168.2.1:16992)

l By default, the port is 16992. Use port 16993 and https:// to connect to the Intel AMT WebGUI on a computer that has been configured and

set up in the Enterprise mode.

l If DHCP is used, then use the fully qualified domain name (FQDN) for the ME. The FQDN is the combination of the host name and domain.

(example: http://host_name:16992 or http://system1:16992)

The management computer makes a TCP connection to the Intel AMT capable computer and accesses the top level Intel AMT-embedded Web page
within the Management Engine of the Intel AMT capable computer.

4. Type the username and password.

The default username is admin and the password is what was set during Intel AMT setup in the MEBx.

5. Review the computer information and make any necessary changes.

You can change the MEBx password for the remote computer in the WebGUI. Changing the password in the WebGUI or a remote console results in two
passwords. The new password, known as the remote MEBx password, only works remotely with the WebGUI or remote console. The local MEBx
password used to locally access the MEBx is not changed. You have to remember both the local and remote MEBx passwords to access the computer
MEBx locally and remotely. When the MEBx password is initially set in Intel AMT setup, the password serves as both the local and remote password. If
the remote password is changed, then the passwords are out of sync.

6. Select Exit.

Back to Contents Page