Lenovo ThinkCentre M92, ThinkCentre 2119, ThinkCentre M92p, ThinkCentre M92z, ThinkCentre 2121 Configuration Guide [en, ar, bg, br, cs, da, de, el, es, fi, fr, he, hr, hu, id, it, ja, ko, nl, pl, pt, ro, ru, sk, sl, sr, sv, th, tr, uk, zc, zh]

...

ThinkCentreM92/pandM92z IntelActiveManagementTechnology CongurationGuide

Note:Beforeusingthisinformationandtheproductitsupports,readthegeneralinformationinAppendixC “Notices”onpage25.

FirstEdition(May2012)

©CopyrightLenovo2012.

LIMITEDANDRESTRICTEDRIGHTSNOTICE:IfdataorsoftwareisdeliveredpursuantaGeneralServicesAdministration “GSA”contract,use,reproduction,ordisclosureissubjecttorestrictionssetforthinContractNo.GS-35F-05925.

Contents

Aboutthisdocument..........v

Chapter1.IntroductiontoIntelvPro

andIntelAMT..............1

Acronyms.................1

Clientsystemrequirements...........2

Chapter2.Featuresandbenetsof

IntelAMT................3

Featuresandbenets.............3

Chapter3.Mainfeaturesof

computersbuiltwithIntelAMT.....5

CIRA...................5

KVMredirection...............6

HostBasedProvisioning............6

Chapter4.IntelAMTsetupand congurationonLenovoThinkCentre M92/pandM92zdesktopcomputers..7

IntelAMTcongurationsettingsinSetupUtility...7

IntelMEBxsetupandconguration.......8

EnteringtheMEBxcongurationuser

interface................8

Intel(R)MEGeneralSettings........8

Intel(R)AMTConguration........11

Driverdescription.............18

MEI.................18

LMS.................18

SOL.................18

Chapter5.Webuserinterface....19

AccessingtheWebuserinterface.......19

ConguringtheIntelAMTcomputer....19

Loggingontotheclient.........20

FunctionsintheWebuserinterface......20

AppendixA.Examplesofconguring IntelAMTinmanualandautomatic setupandcongurationmodes...21

ConguringIntelAMTinmanualsetupand

congurationmode.............21

ConguringIntelAMTinautomaticsetupand

congurationmode.............21

ZTCprovisioning............21

USBprovisioning............22

AppendixB.Factorydefaultsettings

fortheIntelMEBx...........23

AppendixC.Notices..........25

Trademarks................26

©CopyrightLenovo2012

iii

ivThinkCentreM92/pandM92zIntelActiveManagementTechnologyCongurationGuide

Aboutthisdocument

ThisdocumentprovidesinformationaboutIntel

ActiveManagementT echnology(IntelAMT)forLenovo ThinkCentre®M92/pandM92zdesktopcomputers.Thisdocumentprovidesstep-by-stepinstructionson howtouseIntelAMT.

ThisdocumentisintendedfortrainedITprofessionalsorthoseresponsibleforconguringcomputers throughouttheirorganizations.Thereadersshouldhavebasicknowledgeofnetworkandcomputer technology,andbefamiliarwiththetermsTCP/IP,DHCP ,IDE,DNS,SubnetMask,DefaultGateway,Domain Name,andsoon.

Thisdocumentprovidesinformationaboutthefollowingtopics:

Chapter1“IntroductiontoIntelvProandIntelAMT”onpage1:Thischapterprovidesageneralintroduction toIntelvPro

™

andIntelAMT.

Chapter2“FeaturesandbenetsofIntelAMT”onpage3:Thischapterintroducesthefeaturesand benetsofIntelAMT.

Chapter3“MainfeaturesofcomputersbuiltwithIntelAMT”onpage5:Thischapterintroducesthemain featuresofIntelAMTbuilt-incomputers.

Chapter4“IntelAMTsetupandcongurationonLenovoThinkCentreM92/pandM92zdesktopcomputers” onpage7:ThischapterprovidesdetailedinstructionsonhowtocongureIntelAMTsettingsonLenovo ThinkCentreM92/pandM92zdesktopcomputers.

Chapter5“Webuserinterface”onpage19:Thischapterprovidesinstructionsonhowtoaccessthe IntelAMTWebuserinterface.

©CopyrightLenovo2012

viThinkCentreM92/pandM92zIntelActiveManagementTechnologyCongurationGuide

Chapter1.IntroductiontoIntelvProandIntelAMT

IntelvProisabusinesscomputerplatformthatprovidesbusinesscomputerswithenhancedremote managementcapabilities.ForcomputersbuiltwithIntelvPro,ITadministratorscanuseathirdpartysoftware toremotelycollectinventoryinformation,diagnoseproblems,andprovidevariousservicesregardlessof thecomputerpowerstateortheoperatingsystemstate.ITadministratorscanalsoisolateandprotect individualcomputersandthenetworkfromthreats.

AsafeatureofIntelvPro,IntelAMTisdesignedtoprovideremotemanagementofcomputersregardless ofthecomputerpowerstateortheoperatingsystemstateaslongasthecomputersareconnectedtoan electricaloutletandanetwork.

IntelAMTisdesignedasabuildingblockandnotacompletesolution.ThisenablesOriginalEquipment Manufacturers(OEMs)toincorporateIntelAMTintotheirclientandserverhardwareplatforms.Competent andauthorizedthirdpartyapplicationsprovidemanagementandsecurityservicesthattakeadvantageof theIntelAMTfeatures,suchasout-of-bandaccesstoassetinformation,eventlogs,hardwareandsoftware tables,andembeddedcapabilities.

Acronyms

Thefollowingtablelistsandexplainssomeacronymsusedinthisdocument.

AcronymDescription

ACLAccessControlList

AMTActiveManagementTechnology

ASFAlertStandardFormat

BIOSBasicInputOutputSystem

CIRAClientInitiatedRemoteAccess

DHCPDynamicHostCongurationProtocol

DNSDomainNameServer

FQDNFullyQualiedDomainName

FWFirmware

HBPHostBasedProvisioning

HECIHostEmbeddedControllerInterface

IDE-RIntegratedDeviceElectronics-Redirection

IPInternetProtocol

ISVIndependentSoftwareVendor

KVMKeyboard-Video-Mouse

LMSLocalManageabilityService

MEManagementEngine

MEBx

MEI

NVMNonvolatilememory

OEMOriginalEquipmentManufacturer

ManagementEngineBIOSExtension

ManagementEngineInterface

©CopyrightLenovo2012

AcronymDescription

OOBOut-of-band

PID/PPS

PKI

PRTCProtectedRealTimeClock

PSK

PXEPrebootExecutionEnvironment

RCFGRemoteConguration

SHASecureHashAlgorithm

SMBSmallandMediumBusinesses

SOLSerial-over-LAN

SPISerialPeripheralInterface

TCPTransmissionControlProtocol

TLSTransportLayerSecurity

WOL

ZTCZeroTouchConguration

ProvisioningIDandProvisioningPre-sharedKey

PublicKeyInfrastructure

Pre-sharedKey

WakeonLAN

Clientsystemrequirements

ThefollowingrmwareandsoftwarerequirementsmustbemetbeforetheIntelManagementEnginecanbe conguredandrunontheclientsystem:

•TheSPIashdeviceprogrammedwiththeIntelAMT8.0ashimageintegratingBIOS,IntelManagement Engine,andGbEcomponentimagesisinstalled.

•TheBIOSissetupwithIntelAMTenabled.

•Devicedrivers(IntelMEI/SOL/LMS)areinstalledandconguredontheclientsystemtoensurethatallof theIntelManagementEnginefeaturesworkcorrectly.

2ThinkCentreM92/pandM92zIntelActiveManagementTechnologyCongurationGuide

Chapter2.FeaturesandbenetsofIntelAMT

ThischapterintroducesthefeaturesandbenetsofIntelAMT.

ThefollowingtableliststheLenovobusinesscomputerswithIntelAMTinstalled.

LenovocomputerIntelAMTversion

ThinkCentreM92z

ThinkCentreM92/p

ThinkCentreM91p

ThinkCentreM90p

ThinkCentreM58p

ThinkCentreM57p

ThinkCentreM55p

Featuresandbenets

ThinkCentreM92/pandM92zcomputersbuiltwithIntelAMTenableITadministratorstobetterdiscover, heal,andprotectthenetworkedcomputingassets.

•Discover:IntelAMTstoreshardwareandsoftwareinformationinnonvolatilememory(NVM).Withbuilt-in manageability,IntelAMTenablesITadministratorstodiscoverassetsremotely,evenwhencomputersare turnedoff.

•Heal:Thebuilt-inmanageabilityofIntelAMTprovidesout-of-band(OOB)managementcapabilities,which enableITadministratorstoremotelydiagnosecomputerproblemsandrecovercomputersevenifthe operatingsystemsareinoperable.ProactivealertingandeventlogginghelpITadministratorsdetect problemsquicklytoreducecomputerdowntime.

•Protect:TheIntelAMTsystemdefensefeatureenablesbetterprotectionforcomputersbyproactively blockingincomingthreats,controllinginfectedcomputersbeforethecomputerscauseproblemsinthe network,andalertingITadministratorswhencriticalsoftwareagentsareremovedfromthecomputers.

IntelAMT8.X

IntelAMT7.X

IntelAMT6.X

IntelAMT5.X

IntelAMT3.X

IntelAMT2.X

ThefollowingtableshowsthefeaturesandbenetsofIntelAMT.

Table1.FeaturesandbenetsofIntelAMT

FeaturesBenets

OOBsystemaccess

Remotetroubleshootingandrecovery

ProactivealertingDecreasescomputerdowntimeandminimizesITservice

RemotehardwareassettrackingIncreasesspeedandaccuracywithreducedaccounting

Enablesremotemanagementofclientsregardlessof clientpowerstateandoperatingsystemstate

SignicantlyreducesIThelpdeskvisitsandincreasesIT serviceefciency

time

costs,comparedwithmanualinventorytracking

+ 25 hidden pages