Intel Communities : Blog List - Intel® vPro™ Expert Center

Intel 4th Gen Core vPro Processors & Intel AMT Announcement

webadmin@intel.com — Tue, 04 Jun 2013 14:00:49 GMT

Intel® 4th Gen Core™ vPro™ Processor &

Intel® Active Management Technology (version 9.0)

Configuration Management Product Implications

Intel® vPro™ Technology

Product Advisory

Summary:

Customers using IT configuration management products with support for Intel® AMT may be affected by a change in version 9.0. Intel® 4th Gen Core™ vPro™ Processors ship with Intel® AMT version 9.0 in 2013.

1. What specifically is different about Intel’s 4th gen Intel® Core™ Processor platforms with Intel® AMT?

Intel’s Core™ Processor Platforms prior to 4th generation with Intel® AMT supported the EOI communication protocol. Starting with Intel® AMT 3.2, an industry standard protocol for out-of-band management was adopted. That protocol is WS-Management (WS-MAN). Intel supported both protocols from Intel® AMT 3.2 until 8.x. Plans to remove the older EOI protocol were stated in 2009 with Intel® AMT 9.x as the first generation that only supports the WS-MAN protocol.

2. How do I know if I am affected?

There are IT configuration management products that have not made the transition to WS-MAN for Intel® AMT. These products may require that the customer perform an upgrade to their configuration management product, to maintain compatibility with new platforms starting with Intel® 4th Gen Core™ vPro™ Processors. Please check with your ISV to see if an upgrade is required to maintain compatibility.

3. How will this change impact customers’ experience?

If a customer is using an IT configuration management product that is not affected, then there is no change to the customer experience. For customers using an IT configuration management product that requires an upgrade, there will be changes to the customers’ business processes.

4. In the meantime, what is the impact with current Intel® vPro™ customers?

Existing Intel® vPro™ Platforms with Intel® AMT that have already been provisioned will continue to be managed with IT configuration management products. Customers with Intel® vPro™ Platforms that have not provisioned Intel® AMT should check with their ISV for specific list of supported Intel® AMT features and prior versions.

5. How will customers be supported?

Customers are encouraged to contact their ISV directly for support.

6. Who can I contact with questions or for more information?

Intel Customer Support: www.support.intel.com
For information about: Intel® vPro™ Platforms: www.intel.com/go/vpro

McAfee Deep Command 2.0: Improving Detection and Configuration of Intel AMT

webadmin@intel.com — Fri, 26 Apr 2013 22:35:31 GMT

Detecting, configuring, and maintaining the Intel AMT configuration across an enterprise requires automation.

Setting up a lab or initial pilot environment through McAfee ePO should be simple without any 3rd party software or infrastructure customization.

Announcing McAfee Deep Command 2.0 Beta

Simple - "One-Click" configuration of Intel AMT from McAfee ePO
Microsoft CA optional - generate and apply Intel AMT certificates via McAfee ePO (including CIRA\Gateway Certificates)
Planning for the future - works with McAfee ePO 4.6.x or 5.0

The beta starts April 30th.

See the introductory video at https://community.mcafee.com/videos/1600

Interested in beta participation? Subscribe to https://community.mcafee.com/groups/epo-direct-beta

New to McAfee ePO Deep Command? See recorded demonstration of version 1.5 at https://community.mcafee.com/videos/1499

Note: Viewing content on McAfee Community will require a logon account.

REGISTER NOW FOR TODAY'S EVENT! Deploying Windows* 8 and Touch in the Enterprise

webadmin@intel.com — Wed, 10 Apr 2013 15:20:32 GMT

Intel IT is fully engaged in the process of integrating Windows* 8 into the corporate environment now that the new OS is running on thousands of business Ultrabooks, other mobile devices, and desktop PCs at Intel. Checkout today's live webinar where Intel experts Tiffany Pany and David Scheer will share their team’s insights and experiences on integrating Windows* 8. Register now!

Project Informatica Sets the Standard for Mobility

webadmin@intel.com — Mon, 25 Mar 2013 16:34:33 GMT

Download Now

Italian ICT specialist Project Informatica needs the latest mobile computing devices—combining all the best elements of performance, security and usability—to show off to customers and keep its employees productive in the office or on the road. After rigorous testing, it chose the Samsung Slate* 700T, a tablet based on the second-generation Intel® Core™ i5 processor and the Windows* 8 operating system.

“The touch-based tablet powered by the Intel Core i5 processor and Windows 8 is strategic for our sales team," explained Alberto Ghisleni, managing director at Project Informatica. "It allows them to save time while having a more appealing and interactive graphic interface for their most commonly-used applications.”

Learn all about it in our new Project Informatica business success story. You can find more like this one on the Intel.com Business Success Stories for IT Managers page or the Business Success Stories for IT Managers channel on iTunes. And to keep up to date on the latest stories, follow ReferenceRoom on Twitter.

*Other names and brands may be claimed as the property of others.

Unisys Provides Fast Access to Medical Information, Speeding Care to Patients

webadmin@intel.com — Tue, 19 Mar 2013 20:02:00 GMT

Download Now

To speed the time it takes clinicians to get to critical patient records, IT solutions provider Unisys is developing an application called MovilMed* that compiles data from multiple systems into one interface that’s easily accessible. Tablets featuring 3rd generation Intel® Core™ and Intel® Core™ vPro™ processors and Intel® Atom™ processors will give medical staff access to MovilMed no matter where they are. The Intel processor-based tablets also support Microsoft Windows* 8, giving IT a common platform.

“We’re developing the MovilMed solution around the Intel platform, which provides an environment that’s easy to manage and delivers the performance we need,” explained David Howard, director of IT automation for Unisys.

Read all about it in our new Unisys business success story. You can find more like this one on the Intel.com Business Success Stories for IT Managers page or the Business Success Stories for IT Managers channel on iTunes. And to keep up to date on the latest stories, follow ReferenceRoom on Twitter.

*Other names and brands may be claimed as the property of others.

Digital Text Gets an Education in Mobile Computing

webadmin@intel.com — Mon, 11 Mar 2013 16:28:32 GMT

Download Now

Digital Text creates digital and multimedia textbooks for schoolchildren in Spain. To be sure it was recommending the most appropriate and up-to-date hardware for its customers, the company evaluated a number of mobile computing devices including the Lenovo Twist* convertible Ultrabook™ powered by Intel® Core™ i5 processor and running Microsoft Windows* 8. Digital Text needed the device it chose to be lightweight and relatively compact to fit onto a student’s desk along with other resources and more traditional textbooks.

“[The Ultrabook] demonstrated optimum performance, with fantastic speed when starting it up and opening our applications," explained Héctor Ruiz-Martín, general manager of Digital Text. "It was really fluid with elements like Flash* and this was impressive. The device that I tested had the power of a desktop PC and it was clear that Flash was very responsive.”

Read all about it in our new Digital Text business success story. You can find more like this one on the Intel.com Business Success Stories for IT Managers page or the Business Success Stories for IT Managers channel on iTunes. And to keep up to date on the latest stories, follow ReferenceRoom on Twitter.

*Other names and brands may be claimed as the property of others.

Microsoft* Windows 8: How to enable Client Hyper-Von your Intel vPro platform

webadmin@intel.com — Wed, 06 Mar 2013 22:41:25 GMT

Client Hyper-V* with Intel® Active Management Technology (Intel® AMT):

Client Hyper-V* virtualizes your Windows 8* installation. It allows you to add one or more child virtual machines, running other Operating Systems, as windows inside the Windows 8 desktop.

If you give Hyper-V* a try, you won’t have to worry about the effect of Hyper-V on your Intel vPro platform. Intel® Active Management Technology (Intel® AMT) functionality is still available with Hyper-V* enabled.

Hyper-V* can be enabled or disabled on vPro systems at any time.
Intel® Active Management Technology (Intel® AMT) can be enabled and provisioned with or without Hyper-V*.

Note: Intel® Active Management Technology (Intel® AMT) provides the capability for IT departments to manage client systems even when the PCs are powered down.

The advantage of Hyper-V*

There have been significant barriers to implementing other Client Virtualization solutions including:

Deployment:

Other virtualization solutions, utilizing a hypervisor, may require a new installation which deletes whatever is already on the hard drive. The existing OS and data are lost. With Windows 8 there is no need to replace the operating system.

Hyper-V is relatively easy to deploy. In the Windows 8 features list, simply turn Hyper-V on and reboot. Windows 8 is now virtualized, although you wouldn’t notice it unless you were told. It doesn’t appear any different than Windows 8 without Hyper-V enabled. All of the user settings remain as before.

Platform Compatibility

Other virtualization solutions may have a difficult time keeping up with the HW devices and platform models that are available. The hypervisors used by other solutions may only install on a fraction of the systems supported by Windows 8*.

While not all windows 8* compatible systems will run Hyper-V*, there is a broader range of hardware that is compatible with Hyper-V* than some of the other client virtualization solutions. See the list of Hyper-V requirements below.

VM management

The Hyper-V* manager provides the capability to easy manage VMs. VMs can be managed locally or on a Windows 2012* server. On the local system you can create snapshots of your VMs. For example, you can create a base install and create a new snapshot. Then add a service pack to that snapshot and create another snapshot. Next you could add applications and create yet another snapshot.

You can also create different branches from the various snapshots. Based on the example above you could create a new snapshot of the base install and add another set of applications without installing the service pack. Using the Hyper-V manager you can switch to any snapshot and make it active.

Hyper-V* Requirements:

64 bit PCs with Second Level Address Translation running 64 bit versions of Windows 8 pro or enterprise
4 G of Memory
HW virtualization such as Intel’s VT-x technology

Resources:

About Virtual Machines and Guest Operating Systems

http://technet.microsoft.com/en-us/library/cc794868(v=ws.10).aspx

Client Hyper-V

http://technet.microsoft.com/en-us/library/hh857623.aspx

http://social.technet.microsoft.com/wiki/contents/articles/7704.client-hyper-v-survival-guide.aspx

Hyper-V Enabling Process

Hyper-V* is enabled through Control Panel -> Programs and Features -> Turn Windows features on or off.

After Hyper-V is enabled a reboot is required. Once the system has rebooted, launch the Hyper-V Manager and select the system name in the left pane. Next, select new -> Virtual Machine under options in the right pane. The New Virtual Machine Wizard will launch.

New Virtual Machine Wizard

Skip the “Before You Begin” screen.

Specify Name and Location:

Assign Memory:

Configure Network: for the first VM the only choice will be “not connected”. The network will be added later.

Connect Virtual Hard Drive:

Installation Options:

Completing the New Virtual Machine Wizard:

Select Finish and follow the OS install instructions. The new Virtual Machine is now visible in the Hyper-V Manager. Select the VM and start it by selecting “connect”.

Once the OS is installed disconnect the ISO image from the CD/DVD drive. Click on settings of the VM and then select the DVD drive under the IDE Controller. Select “none” under media. Note: do not delete the CD/DVD drive.

Virtual Switch Manager

From the Hyper-V Manager select the Virtual Switch Manager. Create a new “External” virtual network switch for your wired LAN, and if needed create another for your wireless LAN.

Wired network settings:

Wireless network settings:

Running the VM

After launching the Virtual Machine you can see Windows 7 running in a separate window on the Windows 8 desktop.

Below you can see that Windows 7 and Windows 8 both have internet access.

VM Snapshots

Hyper-V provides the capability to take snapshots of your VM. You can create a snapshot of your base OS install and then use that to create separate snapshots that have different applications or configurations. You can instantly switch to any snapshot you want by selecting it and applying it to the VM. Snapshots can even be taken when the VM is running.

Can an End User stop a KVM session?

webadmin@intel.com — Sat, 02 Mar 2013 01:10:12 GMT

Yes - This feature is enabled via the Intel Management and Security Status (IMSS) application.

IMSS is installed as part of the Intel AMT driver set. A small icon will appear in the task tray.

The user does need to open or see this icon. The default key sequence to stop a redirection session is Shift+Escape

Shown below is the IMSS screen, on the Intel AMT tab. The hot key can be changed by the user if they so desired.

Note: The IMSS application and hotkey functionality are operating system dependent.

How does a user know if a redirection session is occuring on their computing device?

Two items will show on the screen independent of the host operating system:

Shown in the upper right corner of the screen - a flashing icon
Red border around the screen.
- Note: The red border is more pronounced on Intel AMT 8.x and higher systems, where an alternating red\yellow flashing border occurs.

One final reminder - in many circumstances User Consent must be obtained to establish the initial session. This further helps to protect the privacy of the end user. Shown below is an example of the prompt on the user screen - which will appear regardless of the operating system state.

Expired CRLs and how they can derail your AMT configuration efforts

webadmin@intel.com — Thu, 07 Feb 2013 16:35:16 GMT

A while back I ran into an issue configuring an AMT system in TLS mode. I wanted to walk you through the issue and one potential solution in the event you are seeing similar issues with TLS.

I did a quick overview of my environment and everything appeared to be set up correctly. I was able to provision using a non-TLS profile in SCS, but when I switched to a TLS profile I kept getting this error on the vPro client while running ACUConfig.exe:

“Exit with code 75.

Details: Failed to complete remote configuration of this Intel(R) AMT device. Failed to get the certificate from the CA. (Certificate ID: 3310051103). (0xc0002825). The certificate chain could not be built. Please make sure that the root certificate is installed properly. (0xc0003e93). Intel(R) AMT Operation failed. (Request Certificate). (0xc00007d5). The RCS failed to process the request.”

I checked out the SCS server and made sure the root Cert was installed correctly and everything looked normal. Then accessing the MMC cert snap-in on the SCS server, I created a test request to the CA for the AMT TLS cert and it issued it to me:

And as you can see, the OS had no issues with the certificate, but I was still seeing the errors on the vPro client while running ACUConfig.exe.

Taking a closer look at the acuconfig error message, it seemed like the SCS was having trouble building the certificate chain. So I decided to take a look at the CRL. After some digging around a bit, I decided to copy the CRL from the Cert Authority. To do this I just ran this command from a PowerShell prompt on the Certificate Authority:

Then I copied the crl.crl file over to the SCS server and installed it:

After I finally got the CRL installed on the SCS server, I restarted the SCS service and attempted the provision again. Sure enough, I was able to complete the process and the Cert Authority issued the TLS certificate for the AMT device.

There are quite a few different methods of publishing / referencing the CRL in your environment, for more information see this technet page: http://technet.microsoft.com/en-us/library/cc737760(v=ws.10).aspx

Instead of relying on the SCS error messages, you could also use a utility like certutil to check the validity of the CRL. Here is a blog post on TechNet on Basic CRL Checking with certutil: http://blogs.technet.com/b/pki/archive/2006/11/30/basic-crl-checking-with-certutil.aspx

Bill York also has some information related to expired CRLs and SCCM: http://communities.intel.com/thread/20138

If you suspect you are having issues with the CRL in your environment, this manual workaround will get you back up and running, but for a long term fix you should bring it up with your PKI team.

Upcoming Webinar: The importance of replacing aging PCs in today’s consumerized IT environment

webadmin@intel.com — Wed, 06 Feb 2013 15:08:41 GMT

Intel® IT Center Talk to an Expert Webinar:
PC Refresh in the Consumerized IT Environment
Tuesday, February 12, 2013
9:00 - 10:00 a.m. Pacific Standard Time

Talk Live with Intel Experts:
David Buchholz, Director of Consumerization, Intel IT
John Mahvi, Business Client Product Line Manager, Intel IT

Moderator: Chris Peters, Global Business Marketing Strategist, Intel

In this live video webinar, Intel experts will share the insights their teams have gained through firsthand experience with PC refresh in a complex, fast-changing consumerized IT environment.

David and John will cover the positive impact of PC refresh on:

Security and manageability
Decisions regarding services and devices to be supported
User productivity and satisfaction
TCO plus support, repair, and energy costs

With an efficient, strategic PC refresh program that includes PCs featuring Intel® vPro™ technology, you can dramatically enhance the user experience on company-issued PCs and laptops. And, by doing so, you can resolve many of the issues that arise due to BYO in particular, and consumerization in general.

So, bring your most pressing questions, and take advantage of this opportunity to ask the experts.

Register now >

Intel Communities : Blog List - Intel® vPro™ Expert Center

Intel 4th Gen Core vPro Processors & Intel AMT Announcement

McAfee Deep Command 2.0: Improving Detection and Configuration of Intel AMT

Announcing McAfee Deep Command 2.0 Beta

The beta starts April 30th.

REGISTER NOW FOR TODAY'S EVENT! Deploying Windows* 8 and Touch in the Enterprise

Project Informatica Sets the Standard for Mobility

Unisys Provides Fast Access to Medical Information, Speeding Care to Patients

Digital Text Gets an Education in Mobile Computing

Microsoft* Windows 8*: How to enable Client Hyper-V*on your Intel vPro platform

Can an End User stop a KVM session?

Expired CRLs and how they can derail your AMT configuration efforts

Upcoming Webinar: The importance of replacing aging PCs in today’s consumerized IT environment

Microsoft* Windows 8: How to enable Client Hyper-Von your Intel vPro platform