Intel Communities: Message List

Re: Different versions of AMT out there? KVM not available in 'standard'?

webadmin@intel.com — Tue, 17 Apr 2012 16:55:21 GMT

With just a quick glance at http://processormatch.intel.com/CompDB/SearchResult.aspx?BoardName=dq67ep and matching it up at http://ark.intel.com/products/53427/Intel-Core-i3-2120T-Processor-(3M-Cache-2_60-GHz), it looks like you should be able to get SOL functionality from the I3-2120T (I know the 2120 should support it, not sure about the lower power "T" version however).

Now I have not tested this yet, but will look around the lab for this processor board combo and let you know what I find.

thanks!

Josh

Re: Keyboard no

webadmin@intel.com — Tue, 17 Apr 2012 16:58:03 GMT

Interesting.. thanks for the follow up.

Let us know if you see it happen again!

thanks

Josh

Re: Keyboard no

webadmin@intel.com — Wed, 11 Apr 2012 15:51:17 GMT

Hi there, have you tried to send "F8" to the client using the VNC+ menu?

Also, check out this post.. it seems that you are seeing similar behaviour:

http://communities.intel.com/thread/24389

Jake mentions in the post that legacy keyboard support may be disabled.

Hope this helps

thanks!

Josh

Re: AMT Management Cert 4096-bit key lengths - which versions?

webadmin@intel.com — Wed, 04 Apr 2012 23:02:30 GMT

Hi Shaw,

I am still working to get a good Matrix of Cert size support, but in the meantime:

The latest versions of Intel AMT firmware (2.2.10, 2.6.20, 3.2.10, 4.2.0, 5.1.10, 6.0 or later) support 4096-bit key length for root and intermediate certificates.

The last certificate in the chain, the certificate stored in the Intel AMT certificate store, must have a 2048-bit key length.

The root certificate cannot exceed a length of 1500 bytes.

Again, I will try and get a matrix that shows this info.

hope this helps!

Josh

Re: Keyboard no

webadmin@intel.com — Wed, 04 Apr 2012 23:12:21 GMT

Hi Matt,

Sorry to hear you are having trouble with KVM

Can you list the OEM/Model/Firmware Version of your AMT client?

I will take a look a look around and see if there is any other reported issues similar to yours.

thanks!

Josh

Re: AMT with TLS and Self Signed Certificates - challenge

webadmin@intel.com — Wed, 04 Apr 2012 22:09:31 GMT

Here is a direct link to that PDF Dan was mentioning:

http://software.intel.com/en-us/blogs/wordpress/wp-content/uploads/2011/03/IntelR_SCS_7.0_User_Guide.pdf

There, in appendix B, you can get more informaiton on remote configuration.

Now for your questions:

1. Correct. If you purchase a Provisioning Cert from (VeriSign, GoDaddy, etc..) there is no need to touch your systems.

2. Correct. If you do not want to purchase a Provisioning Cert, you will need to generate your own internal Provisioning Certificate and touch each system to input the Root Hash into the MEBx.

3. SCCM requires you use certificaftes for Provisioning and also requires that you set up an internal CA to support TLS.

4. Correct. you will want to check this matrix to see the Firmware level required for the specific Provisoning Certificate.

http://communities.intel.com/community/openportit/vproexpert/blog/2011/09/08/intel-amt-firmware-remote-configuration-hash-matrix

5. http://software.intel.com/en-us/blogs/wordpress/wp-content/uploads/2011/03/IntelR_SCS_7.0_User_Guide.pdf

I hope these answers help!

Josh

Re: Outpost Tool

webadmin@intel.com — Wed, 04 Apr 2012 22:47:14 GMT

Now I am seeing something similar as well.

I ended up forcing it to run as administrator and can get It to start and can connect once.

If I try and disconnect/reconnect that is when i see issues.

I will bring this up with the developer and see if there is anything that could be causing this to fail.

also, there were times when the app reported the service was running, when it really wasn't.

Can you verify that the service is running when you attempt to connect?

thanks!

Josh

Re: SCCM and CERTIFICATe Change problems

webadmin@intel.com — Mon, 02 Apr 2012 21:46:15 GMT

Hi Roger,

It sounds like you may have a few different issues here.

For starters, let's take a look at the 7.1 machines.

are you able to provision them ok?

Can you issue power commands to them ok?

What about the OOB Console? Can you connect?

Also what version of OS are you running on your SCCM Server?

Let's start here and see if we can pin-point your issue.

thanks!

Josh

Re: Outpost Tool

webadmin@intel.com — Mon, 02 Apr 2012 22:03:27 GMT

Hi There,

Have you tried using the "Open" DTK?

I was having some trouble connecting to a 7.x machine, similar to what you are seeing here, but the Open DTK worked fine:

http://opentools.homeip.net/open-manageability

thanks!

Josh

Re: Different versions of AMT out there? KVM not available in 'standard'?

webadmin@intel.com — Thu, 29 Mar 2012 20:51:07 GMT

Hi ParmB,

You are correct, KVM will only be supported on the full vPro enabled systems.

I took a look at the Lenovo site and the only thing that sticks out is in the detailed tech specs:

here is the M91p for example:

http://www.lenovo.com/products/us/desktop/thinkcentre/m-series/m91-m91p/

you will notice about 1/2 way down the page it shows "Best in Class Manageability" and highlights Intel vPro technology

on the M81 you see that it only refers to "Stability and Manageability" with no Intel vPro reference.

http://www.lenovo.com/products/us/desktop/thinkcentre/m-series/m81/

I agree it could be a bit clearer, and we have created a matrix in the past to help guide users to the appropriate systems.

I will follow up with the internal team and see if we can get this matrix updated:

http://communities.intel.com/docs/DOC-2033

thanks!

Josh