Home > Intel Communities > Open Port IT Community > Intel® vPro™ Expert Center > Activation > Blog > Authors > Terry Cutler

Activation Blog

7 Posts authored by: Terry Cutler
0

If you are moving to an Altiris 7 environment (Symantec Management Platform or Dell Client Management platform), and already have familiarity in working with vPro in an Altiris 6 environment - take a look at this article on Symantec Connect

 

The article provides 4 quick insights:

  • Pre-defined TaskServer jobs for configuring and maintaining
  • Checking and fixing the OOB Site Service installation
  • Once OOB Discovery is enabled, using Filters to determine what systems have Intel AMT
  • Placement of the remote configuration certificate (different than Altiris 6 environments)
0 Comments Permalink
0

How Do I Use the CSV File Generated by Dell CFI Process?

If you've utilized the Dell CFI process for vPro configuration\provisioning, you've likely received a CSV file with a list of preshared keys and password.   The normal process of importing the security keys to the Intel SCS database will not work since the import process is prompting for a .BIN file.

 

One workaround is to directly import the CSV data into the target database - IntelAMT. 

 

Making a direct database modification has inherit risks - thus you may want to test this on a separate system if unsure.   The good news - if you test on a separate non-production system, you can then follow the correct key export procedure which will generate a valid setup.bin file.  The valid setup.bin file can then be imported to your production server.

For those that want to go directly to database insert - here's what you do:

  • Check the last index number of IntelAMT database table csti_pid_map.  
  • Modify the CSV file to align to the target database table format (id, pid, pps, current_password, admin_password, used)
  • For the "used" field, value of zero '0' is unused and will show the values in the console once imported.  A value of '1' is used and will hide from console view
  • Use a bulk SQL import to insert the modified CSV file directly into the database

Explanation of Attached Sample File

In the attached file (convertCSV2BIN.zip) are three sample files for your reference:

  • samplesetup.csv - Modified CSV file to match the database table structure.   Notice that the index starts at 108 - this is because my test system already had generated 107 keys before stepping through this exercise
  • importcsvPID.sql - Sample SQL script for bulk import of samplesetup.csv to the IntelAMT database table csti_pid_map
  • samplesetup.bin - Correctly formatted .BIN file for preferred method of import   (this is unnecessary if you've decided to directly import)

Concluding Thoughts

My intent in sharing this is to provide a simple workaround method to frustrating situation.   Conversations with Dell associates have occurred, yet corrections to the CFI process for vPro provisioning have not yet occurred.   Thus in the meantime - if you receive a CSV file - use the workaround.

0 Comments Permalink
3

This blog entry is primarily for those who are looking to acquiring a VeriSign certificate for vPro remote configuration.  If you've already acquired and are using the certificate, VeriSign will likely be calling you with an update.

 

On May 17th, VeriSign transitioned to a new root certificate for G1 standard certificates - click here to read statement from VeriSign's website 

 

Without going into great detail - how does this affect vPro remote configuration with a VeriSign certificate?

 

The good news is that VeriSign certificates are available for vPro remote configuration.  Take a look at the landing page - http://www.verisign.com/ssl/intel-vpro-technology/index.html

 

A few items to note about the May 17th event:

  • The VeriSign G1 standard certificate has transitioned to their G2 certificate.  The G2 root certificate hash is not currently inside the vPro\AMT platform.
  • The VeriSign certificate available for purchase at the landing site are Secure Site Pro certificates... also referred to as G1 Premium.   You will notice a price increase.  The G1 Premium certificate root hash is the same as the former G1 standard.  The difference is the signing\coding required for Premium level.
  • If you purchased and are using a VeriSign G1 standard certificate for remote configuration prior to May 17, 2009 - VeriSign will be contacting you before the renewal timeframe (i.e. 1, 2, or 3 years based on what you originally purchased) to discuss options.  PLEASE NOTE: The G1 standard certificate is still valid and will work until issued expiration.  You simply cannot renew to the same G1 standard certificate... since it's no longer being issued.

 

If you have questions - please blog back. 

3 Comments Permalink
0

Do you have a bunch of systems that are Intel AMT capable, yet currently set to ASF Manageability mode?  If you're looking for a way to remotely switch these over - take a look at the updated Intel vPro Activator Utility in the Intel SCS v6 preview - http://software.intel.com/en-us/articles/download-the-intel-AMT-SCS-technology-preview/

 

If you extract out the Activator directory - the exe and dll files are what you want.  Test it out on a system.   The command is as follows:

 

     activator /transition

 

You will notice the system's network connection disconnect\reconnect during the transition.  Once complete - you're system is not set to AMT manageability mode.  If the system supports remote configuration (Intel AMT 2.2, 2.6, 3.x or higher), and your infrasrtucture is ready to support remote configuration, then you can immediate start the provisioning event.

 

A great new addition to the toolset!

0 Comments Permalink
0

Have you ever wondered what the optimal provisioning conditions, and if there is anyway to script the event to occur? The linked article refers to batch files, VBscripts, key learning, and supporting materials for provisioning Intel vPro in an Altiris environment.

 

http://juice.altiris.com/node/4082

 

Take a look, add you insights\comments, and so forth.

0 Comments Permalink
0

For those pursuing remote configuration in an Altiris environment, take a look at the article posted at http://juice.altiris.com/article/3866/frequently-asked-questions-about-remote-configuration

 

Some parts of the article are applicable even outside an Altiris environment

0 Comments Permalink
2

If you are planning to be at the Symantec\Altiris ManageFusion event in Las Vegas this year (April 8-10), be sure to sign up for the vPro labs. On Tuesday afternoon there will be an operations focused lab. On Wednesday afternoon there will be an Enterprise Provisioning using Remote Configuration.

 

On the enterprise provisioning side, there are mainly three items to keep in mind

  • Authenticate the Intel vPro firmware to the provisioning service
  • Obtain the Configuration parameters - provision profile, Active Directory OU, etc
  • Map the Clients FQDN and UUID

 

The enterprise provisioning lab will discussion and step through each.

2 Comments Permalink