Home > Intel Communities > Open Port IT Community > Intel® vPro™ Expert Center > Activation > Blog > Tags > josh_hilliker

Activation Blog

3 Posts tagged with the josh_hilliker tag
0

I was recently asked about the security of vPro and Intel Active Management Technology, therefore I started to pull together all the resources I leverage when discussing this topic and help to alleviate concerns of the Information Security folks in the IT shops. here are those links and if you find additional ones that help please add on to the blog.

 

Hardening Measures Built into Intel® Active Management Technology

http://softwarecommunity.intel.com/articles/eng/3703.htm

 

AMT System Defense Usecases

http://communities.intel.com/docs/DOC-1278

 

Intel® Active Management Technology Protect Use Cases

http://softwarecommunity.intel.com/articles/eng/1031.htm

 

Intel® Active Management Technology Use Case #7: Hardware-Based Isolation and Recovery (Protect)

http://softwarecommunity.intel.com/articles/eng/1179.htm

 

 

 

If any questions on security of vPro please let me know.

0 Comments Permalink
0

If you are seeing any failures in your log around setting the hostname during a Remote configuration it could be due to a underscore in the host name. Check out Terry Cutlers post on altiris juice @ http://juice.altiris.com/tech-tip/1622/underscore-not-supported-in-intel-amt-hostnames . Terry references the RFC952 - DoD Internet host table specification @ http://www.faqs.org/rfcs/rfc952.html. Here are the assumptions from that specification.

 

ASSUMPTIONS

 

1. A "name" (Net, Host, Gateway, or Domain name) is a text string up

to 24 characters drawn from the alphabet (A-Z), digits (0-9), minus

sign , and period (.). Note that periods are only allowed when

they serve to delimit components of "domain style names". (See

RFC-921, "Domain Name System Implementation Schedule", for

background). No blank or space characters are permitted as part of a

name. No distinction is made between upper and lower case. The first

character must be an alpha character. The last character must not be

a minus sign or period. A host which serves as a GATEWAY should have

"-GATEWAY" or "-GW" as part of its name. Hosts which do not serve as

Internet gateways should not use "-GATEWAY" and "-GW" as part of

their names. A host which is a TAC should have "-TAC" as the last

part of its host name, if it is a DoD host. Single character names

or nicknames are not allowed.

0 Comments Permalink
0

Nick & I got together this week and evaluated a few platforms for their AMT settings in the BIOS. In this video, Nick explains how to get into each BIOS and where the options for AMT are ( or for that case where they are NOT ).

 

 

Here are a few screen shots of two of the platforms. We are also going to publish out a matrix of the systems with drivers, bios settings that Frank has been working on.. stay tuned for the link.

 

 

0 Comments Permalink