The following is a list of important terms related to the Intel® AMT setup
and configuration:
Setup and configuration — The process that populates the Intel AMT-managed computer with usernames, passwords,
and network parameters that enable the computer to be administered remotely.
Provisioning — The act of setting up and fully configuring Intel AMT.
Configuration service — A third-party application that completes the Intel AMT provisioning
for the Enterprise operational mode.
Intel AMT WebGUI — A Web browser-based interface
providing limited remote computer management.
Operational modes — Intel® AMT can be set up for use in either
Enterprise mode (for large organizations) or Small and Medium Business
(SMB) mode (also called provisioning models). Enterprise mode
requires a configuration service to complete provisioning; SMB mode is set
up manually, does not require much infrastructure, and completes
provisioning through the Intel ME BIOS Extension (MEBx).
Enterprise mode — Once Intel AMT is set up in Enterprise mode, it is ready to initiate configuration of its own capabilities. When all
required network elements are available, simply connect the computer to a power source and the network, and Intel AMT
automatically initiates its own configuration. The configuration service (a third-party application) completes the process for you.
Intel AMT is then ready for remote management. This configuration typically takes only a few seconds. When Intel AMT is set up and
configured, you can reconfigure the technology as needed for your business environment.
SMB mode — Once Intel AMT is set up in SMB mode, the computer does not have to initiate any configuration across the network. It is set up
manually and is ready to use with the Intel AMT WebGUI.
You must set up and configure Intel AMT in a computer before using it. Intel AMT setup readies the computer for Intel AMT mode and enables network
connectivity. This setup is generally performed only once in the lifetime of a computer. When Intel AMT is enabled, it can be discovered by
management software over a network.
Setup and Configuration States
An Intel AMT capable computer can be in one of three
setup and configuration states:
Factory-default state — The factory-default state is a fully unconfigured state in which security credentials are not yet established and Intel AMT capabilities
are not yet available to management applications. In the factory-default state, Intel AMT has the factory-defined settings.
Setup state — The setup state is a partially configured state in which Intel AMT has been set up with initial networking and transport layer security
(TLS) information: an initial administrator password, the provisioning passphrase (PPS), and the provisioning identifier (PID). When
Intel AMT has been set up, Intel AMT is ready to receive Enterprise mode configuration settings from a
configuration service.
Provisioned state — The provisioned state is a fully configured state in which the Intel Management Engine (ME) has been configured with power options, and
Intel AMT has been configured with its security settings, certificates, and the settings that activate the Intel AMT capabilities. When
Intel AMT has been configured, the capabilities are ready to interact with management applications.
Methods for Completing the Provisioning Process
The computer has to be configured before the Intel AMT capabilities are ready
to interact with management application. There are three methods to complete the provisioning process (in order from least complex to most
complex):
Remote configuration — This new feature of Intel AMT 3.0 allows you to connect AC power to the Intel AMT ready computer and the
provisioning process begins automatically without any user input. The provisioning passphrase (PPS) and provisioning identifier (PID)
fields are completed automatically.
Configuration service — A configuration service allows you to complete the provisioning process from a GUI
console on their server with only one touch on each of the Intel AMT capable computers. The PPS and PID fields are completed using a file
created by the configuration service saved to a USB device.
MEBx interface — The IT administrator manually configures the Management Engine BIOS Extension (MEBx) settings on each Intel AMT ready
computer. The PPS and PID fields are completed by typing the 32 character and 8 character alpha-numeric keys created by the configuration
service into the MEBx interface.
