Lenovo ThinkCentre M91p Configuration Guide [en, ar, bg, cs, da, de, el, es, fi, fr, he, hr, hu, id, it, ja, ko, nl, pl, pt, ro, ru, sk, sl, sr, sv, th, tr, uk, zc, zh]

ThinkCentreM91p
IntelActiveManagementTechnology
CongurationGuide

ThinkCentreM91p
IntelActiveManagementTechnology
CongurationGuide

Note:Beforeusingthisinformationandtheproductitsupports,readthegeneralinformationinAppendixC
“Notices”onpage27.

FirstEdition(March2011)

©CopyrightLenovo2011.

LENOVOproducts,data,computersoftware,andserviceshavebeendevelopedexclusivelyatprivateexpenseandare
soldtogovernmentalentitiesascommercialitemsasdenedby48C.F.R.2.101withlimitedandrestrictedrightsto
use,reproductionanddisclosure.

LIMITEDANDRESTRICTEDRIGHTSNOTICE:Ifproducts,data,computersoftware,orservicesaredeliveredpursuant
aGeneralServicesAdministration“GSA”contract,use,reproduction,ordisclosureissubjecttorestrictionssetforth
inContractNo.GS-35F-05925.

Contents

Aboutthisdocument.........v

Chapter1.IntroductiontoIntelvPro

andIntelAMT.............1

Acronyms................1

Chapter2.Featuresandbenetsof

IntelAMT...............3

Featuresandbenets............3

Chapter3.Mainfeaturesof

computersbuiltwithIntelAMT....5

CIRA..................5

KVMredirection..............6

HostBasedProvisioning...........6

Chapter4.IntelAMTsetupand
congurationonLenovoThinkCentre

M91pdesktopcomputers......7

IntelAMTcongurationsettingsinSetupUtility..7

IntelMEBxsetupandconguration......8

EnteringtheMEBxcongurationuser

interface...............8

Intel(R)MEGeneralSettings.......8

Intel(R)AMTConguration........11

Driverdescription.............19

MEI.................19

LMS.................20

SOL.................20

Chapter5.Webuserinterface....21

AccessingtheWebuserinterface.......21

ConguringtheIntelAMTcomputer....21

Loggingontotheclient.........22

FunctionsintheWebuserinterface......22

AppendixA.Examplesofconguring
IntelAMTinmanualandautomatic
setupandcongurationmodes...23

ConguringIntelAMTinmanualsetupand

congurationmode.............23

ConguringIntelAMTinautomaticsetupand

congurationmode.............23

ZTCprovisioning............23

USBprovisioning............24

AppendixB.Factorydefaultsettings

fortheIntelMEBx...........25

AppendixC.Notices.........27

Trademarks................28

©CopyrightLenovo2011

iii

ivThinkCentreM91pIntelActiveManagementT echnologyCongurationGuide

Aboutthisdocument

ThisdocumentprovidesinformationaboutIntel

®

ActiveManagementT echnology(IntelAMT)forLenovo
ThinkCentre®M91pdesktopcomputers.Thisdocumentprovidesstep-by-stepinstructionsonhowtouse
IntelAMT .

ThisdocumentisintendedfortrainedITprofessionalsorthoseresponsibleforconguringcomputers
throughouttheirorganizations.Thereadersshouldhavebasicknowledgeofnetworkandcomputer
technology,andbefamiliarwiththetermsTCP/IP,DHCP ,IDE,DNS,SubnetMask,DefaultGateway,Domain
Name,andsoon.

Thisdocumentprovidesinformationaboutthefollowingtopics:

Chapter1“IntroductiontoIntelvProandIntelAMT”onpage1:Thischapterprovidesageneralintroduction
toIntelvPro

™

andIntelAMT.

Chapter2“FeaturesandbenetsofIntelAMT”onpage3:Thischapterintroducesthefeaturesand
benetsofIntelAMT.

Chapter3“MainfeaturesofcomputersbuiltwithIntelAMT”onpage5:Thischapterintroducesthemain
featuresofIntelAMTbuilt-incomputers.

Chapter4“IntelAMTsetupandcongurationonLenovoThinkCentreM91pdesktopcomputers”on
page7:ThischapterprovidesdetailedinstructionsonhowtocongureIntelAMTsettingsonLenovo
ThinkCentreM91pdesktopcomputers.

Chapter5“Webuserinterface”onpage21:Thischapterprovidesinstructionsonhowtoaccessthe
IntelAMTWebuserinterface.

®

©CopyrightLenovo2011

v

viThinkCentreM91pIntelActiveManagementT echnologyCongurationGuide

Chapter1.IntroductiontoIntelvProandIntelAMT

IntelvProisabusinesscomputerplatformthatprovidesbusinesscomputerswithenhancedremote
managementcapabilities.ForcomputersbuiltwithIntelvPro,ITadministratorscanuseathirdpartysoftware
toremotelycollectinventoryinformation,diagnoseproblems,andprovidevariousservicesregardlessof
thecomputerpowerstateortheoperatingsystemstate.ITadministratorscanalsoisolateandprotect
individualcomputersandthenetworkfromthreats.

AsafeatureofIntelvPro,IntelAMTisdesignedtoprovideremotemanagementofcomputersregardless
ofthecomputerpowerstateortheoperatingsystemstateaslongasthecomputersareconnectedtoan
electricaloutletandanetwork.

IntelAMTisdesignedasabuildingblockandnotacompletesolution.ThisenablesOriginalEquipment
Manufacturers(OEMs)toincorporateIntelAMTintotheirclientandserverhardwareplatforms.Competent
andauthorizedthirdpartyapplicationsprovidemanagementandsecurityservicesthattakeadvantageof
theIntelAMTfeatures,suchasout-of-bandaccesstoassetinformation,eventlogs,hardwareandsoftware
tables,andembeddedcapabilities.

Acronyms

Thefollowingtablelistsandexplainssomeacronymsusedinthisdocument.

AcronymDescription

ACLAccessControlList

AMTActiveManagementTechnology

ASFAlertStandardFormat

BIOSBasicInputOutputSystem

CIRAClientInitiatedRemoteAccess

DHCPDynamicHostCongurationProtocol

DNSDomainNameServer

FQDNFullyQualiedDomainName

FWFirmware

HBPHostBasedProvisioning

HECIHostEmbeddedControllerInterface

IDE-RIntegratedDeviceElectronics-Redirection

IPInternetProtocol

ISVIndependentSoftwareVendor

KVMKeyboard-Video-Mouse

LMSLocalManageabilityService

MEManagementEngine

MEBx

MEI

NVMNonvolatilememory

OEMOriginalEquipmentManufacturer

ManagementEngineBIOSExtension

ManagementEngineInterface

©CopyrightLenovo2011

1

AcronymDescription

OOBOut-of-band

PID/PPS

PKI

PRTCProtectedRealTimeClock

PSK

PXEPrebootExecutionEnvironment

RCFGRemoteConguration

SHASecureHashAlgorithm

SMBSmallandMediumBusinesses

SOLSerial-over-LAN

TCPTransmissionControlProtocol

TLSTransportLayerSecurity

WOL

ZTCZeroTouchConguration

ProvisioningIDandProvisioningPre-sharedKey

PublicKeyInfrastructure

Pre-sharedKey

WakeonLan

2ThinkCentreM91pIntelActiveManagementT echnologyCongurationGuide

Chapter2.FeaturesandbenetsofIntelAMT

ThischapterintroducesthefeaturesandbenetsofIntelAMT.

ThefollowingtableliststheLenovobusinesscomputerswithIntelAMTinstalled.

LenovocomputerIntelAMTversion

ThinkCentreM91p

ThinkCentreM90p

ThinkCentreM58p

ThinkCentreM57p

ThinkCentreM55p

Featuresandbenets

ThinkCentreM91pcomputersbuiltwithIntelAMTenableITadministratorstobetterdiscover,heal,and
protectthenetworkedcomputingassets.

•Discover:IntelAMTstoreshardwareandsoftwareinformationinnonvolatilememory(NVM).Withbuilt-in

manageability,IntelAMTenablesITadministratorstodiscoverassetsremotely,evenwhencomputersare
turnedoff.

•Heal:Thebuilt-inmanageabilityofIntelAMTprovidesout-of-band(OOB)managementcapabilities,which

enableITadministratorstoremotelydiagnosecomputerproblemsandrecovercomputersevenifthe
operatingsystemsareinoperable.ProactivealertingandeventlogginghelpITadministratorsdetect
problemsquicklytoreducecomputerdowntime.

•Protect:TheIntelAMTsystemdefensefeatureenablesbetterprotectionforcomputersbyproactively

blockingincomingthreats,controllinginfectedcomputersbeforethecomputerscauseproblemsinthe
network,andalertingITadministratorswhencriticalsoftwareagentsareremovedfromthecomputers.

IntelAMT7.X

IntelAMT6.X

IntelAMT5.X

IntelAMT3.X

IntelAMT2.X

ThefollowingtableshowsthefeaturesandbenetsofIntelAMT.

Table1.FeaturesandbenetsofIntelAMT

FeaturesBenets

OOBsystemaccess

Remotetroubleshootingandrecovery

ProactivealertingDecreasescomputerdowntimeandminimizesITservice

RemotehardwareassettrackingIncreasesspeedandaccuracywithreducedaccounting

©CopyrightLenovo2011

Enablesremotemanagementofclientsregardlessof
clientpowerstateandoperatingsystemstate

SignicantlyreducesIThelpdeskvisitsandincreasesIT
serviceefciency

time

costs,comparedwithmanualinventorytracking

3

4ThinkCentreM91pIntelActiveManagementT echnologyCongurationGuide