Home > Intel Communities > Open Port IT Community > Intel® vPro™ Expert Center > Blog > 2008 > April > 16
3

Note: This information is based off Microsoft System Center Configuration Manager 2007 SP1 RC and is subject to changes between now and RTM.

 

 

 

 

 

With the upcoming release of Microsoft SCCM SP1 and native support for vPro manageability, there may be a scenario where you have vPro Clients that are activated (provisioned) under Microsoft SMS with the Intel SMS Add-on / Intel SCS that you need to migrate to SCCM SP1. As may have read in the previous blog, Microsoft does not use the Intel SCS for provisioning and configuration of the vPro Clients. Instead, Microsoft as part of their SCCM SP1 implementation, have chosen to develop and integrate their own code base for provisioning and configuration management of vPro Clients. So to migrate vPro Clients from SMS / Intel SCS to SCCM, Intel will be providing a migration utility to help make this transition.

 

 

Before we get into the details of the migration utility, let us first discuss at a high level the overall SMS to SCCM migration process. The first thing to keep in mind is that the vPro client migration from SMS to SCCM SP1 is just a post step after you perform the recommend steps that Microsoft provides for upgrading your SMS environment to SCCM. Microsoft has created an excellent Configuration Manager Upgrade, Interoperability Planning and Deployment guide that walks a customer through the planning and upgrade path from SMS to SCCM. Once these steps are completed, the migration of the vPro Client from the Intel SCS to SCCM SP1 can be initiated.

 

 

(Click picture for higher resolution image)

 

 

 

 

 

 

 

 

Now let us talk a little about the migration utility… At the most fundamental level, the migration utility prepares the vPro Client to be natively reprovisioned by SCCM SP1. The process can be broken into several key steps.

 

  1. Extract list of vPro Clients from the Intel SCS to be migrated to SCCM (List used to track migration progress)

  2. Generate a vPro Client list import file that can be natively used by SCCM SP1

  3. Using the "Import Computer for Out of Band Management wizard" within SCCM SP1, import the list of vPro Clients to be provisioned by SCCM

  4. Connect to each vPro Client to be migrated and prepare it for reprovisioning by SCCM SP1.

  5. Once the vPro provisioning hello packet is received, SCCM SP1 will begin its native provisioning process for the vPro Client

 

(Click picture for higher resolution image)

 

 

 

 

 

You may conclude that “preparing the vPro Client to migrated” is basically performing an unprovision. For the most part that is correct; however, as part of the preparation step we are setting some critical values to allow it to be reprovision without having to physically touch the client. For example, we are setting values such as Remote Configuration Certification hash used by SCCM, PID/PPS pair (used for WS-MAN Translator for firmware version that do not support Remote Config), and Provisioning Server FQDN / Port (if different then provisionserver DNS entry and 9971).

 

 

At the time you initially run the migration tool, there may be a chance that not every vPro Client will be accessible (for example mobile clients that are not on the network when you initiate the migration). The migration utility will have the ability to log and track which vPro clients have been successfully prepared for migration and which ones where unable to be contacted. Re-running the migration utility at a future dates will attempt to connect to vPro clients that were inaccessible at previous runs. If you still have vPro Clients that are being logged as inaccessible after a couple runs of the migration utility, you may be required to investigate the root cause on why those vPro Clients are not accessible.

 

 

For those that have vPro Clients deployed in your environment but not activated and you are planning on deploying SCCM SP1, Microsoft has enabled their SCCM SP1 Client agent to initiate and authorize the provisioning process through policy. This provides a fairly straight forward and easy mechanism for provisioning your non-activated vPro Clients. To take advantage of this in a no physical touch scenario, your vPro Clients will be required have a firmware version that supports remote configuration (2.2, 2.6, 3.x). If you are not able to upgrade your firmware to a version that supports remote configuration, you will be required to configure (either manually in the MEBx or USB one touch) the PSK PID/PPS pair expected by the WS-MAN translator.

 

 

In the upcoming weeks, we will post our initial beta version of the SMS/Intel SCS to SCCM Migration Utility for vPro Expert Center community review along with a deeper drive into the configuration and usage of the migration utility. Please keep tuned for more detail to come.

 

 

Matt Royer

3 Comments Permalink
2

Have you seen this? if you have I bet your wondering why.. This error can be seen during a SOL session with Altiris when there is a BIOS password set on the notebook.

 

 

 

 

Recently out on a visit we found this error & were checking between a known good system.

We did a little research and saw that default for Terminal Emulation Mode was set to VT100 through the BIOS, instead of using the tool that HP has for windows. After we returned to the plant we used the tool to snap these pixs of the BIOS.

 

 

After changing the Terminal Emulation Mode to ANSI we were able to achieve this..

 

of course after the change the new option was selected "ANSI"..

 

This is the right result you should see..

 

 

Success!! give this a shot if you are using a BIOS Password on a HP 2510P with Altiris..

2 Comments Permalink
1

Note: This information is based off Microsoft System Center Configuration Manager 2007 SP1 RC and is subject to changes between now and RTM

 

 

 

 

 

So as you read through the Microsoft documentation for SCCM SP1, you will most likely notice that Microsoft SCCM SP1 states they have native support for vPro clients with firmware versions 3.2.1 or higher. If Microsoft only natively supports vPro clients 3.2.1 or higher, you may be asking how vPro clients that are running firmware versions 2.x, 3.0, and 3.1 are supported.

 

 

Not to worry; through the use of the Intel WS-MAN translator, SCCM SP1 will be able to provide provisioning and manageability support for earlier versions of vPro firmware. As part of SCCM SP1 Release Candidate, Microsoft has introduced integration support for the WS-MAN Translator (It was not available as part of the initial SCCM SP1 Beta release).

 

 

In a future blog, we will provide a little more detail on the Install, Configuration, and SCCM Enablement of the WS-MAN translator; however, let us take this opportunity to talk little more about SCCM SP1 interaction with the WS-MAN Translator.

 

 

So why doesn't SCCM support earlier vPro firmware versions? The core reason is that SCCM only know how to communicate to vPro Clients in WS-MAN (Web Service Management). Prior to AMT firmware version 3.0, vPro Client only knew how to communicate in a protocol called EOI (External Operations Interface). So just like one person speaking English to another person that only understands French, when SCCM SP1 tries to communicate with a vPro client with a firmware version of 2.x, the vPro client does not understand what the management console wants it to do. So, simular to a person translating for our French and English speaking persons, the WS-Translator translates WS-MAN calls to EOI and from EOI to WS-MAN.

 

 

Ok, so vPro clients with AMT version 3.0 know how to speak WS-MAN. Why do you need the translator for firmware version 3.0 and 3.1? Well without getting into the excessively technical details, there were some changes required in the AMT 3.x firmware to make SCCM SP1 work properly with vPro client running firmware 3.x; these changes were introduced in vPro firmware version 3.2.1. To allow for vPro firmware 3.0 and 3.1 to be supported, we were able to mask those changes that SCCM SP1 required in the WS-MAN Translator.

 

 

The other thing that the WS-MAN translator enables is support for PSK vPro Client provisioning. Natively, Microsoft SCCM SP1 only supports PKI (also commonly referred to as Remote Configuration) for provisioning. vPro firmware version 3.0 supported PKI provisioning from the initial release; however, vPro firmware version 2.x did not received PKI provisioning support until versions 2.2 & 2.6. Although we recommend that you upgrade your vPro firmware to the latest version supported by the OEM, there may be some cases were upgrading 2.2 or 2.6 is not a viable option. So to support clients that are running 2.0, 2.1 and 2.5 firmware, the WS-MAN translator offers a means of supporting PSK provisioning. The key item to keep in mind about PSK support within the WS-MAN translator is that it only supports one PID/PPS pair; the same PID/PPS will be used for all your vPro Clients using PSK for provisioning.

 

 

If desired, you can use PSK provision through the WS-MAN translator for all vPro firmware versions; however, since SCCM SP1 only uses the WS-MAN Translator for firmware versions less then 3.2.1 you are required to use PKI provisioning for any vPro Client firmware version 3.2.1 or higher. It is for this reason (and the fact that you can take advantage of vPro Remote Configuration) that we recommend you upgrade your vPro Clients to 2.2, 2.6, and 3.2.1 were supported by the OEM.

 

 

If you have no vPro Clients in your environment that are less then firmware version 3.2.1, there is no need to use the WS-MAN translator; SCCM SP1 will natively provision and manage vPro clients without the need for the WS-MAN Translator.

 

 

As previously noted, stay tuned for more information on vPro Expert Center about the WS-MAN translator in the next couple weeks.

 

 

Matt Royer

1 Comments Permalink
0

 

Note: This information is based off Microsoft System Center Configuration Manager 2007 SP1 RC and is subject to changes between now and RTM.

 

Microsoft has just release System Center Configuration Manager 2007 SP1 Release Candidate. As previously noted in a past blog, SCCM SP1 is Microsoft's first release that provides native manageability support for vPro Technology.

 

 

 

 

 

Some of the high level changes associated to vPro between SCCM SP1 Beta and RC1 are:

 

  • Kerberos support for Out of Band Console

  • Maintenance Tasks for Certificate Expiration and Kerberos Master Key renewal

  • Update Out of Band Console UI

  • Integration support for the Intel WS-MAN Translator (provides legacy support for firmware version less then 3.2.1)

  • Active Directory Integration

 

 

 

 

 

 

 

To gain access to Microsoft System Center Configuration Manager 2007 SP1 RC, you can request access by:

 

Set-up an account. on MS Connect.
MS Connect Website
http://www.connect.microsoft.com/
After you've logged in, select "Available Connections" from the menu on the left side of the screen.
Select "System Center Configuration Manager 2007". You will be asked to fill out a questionnaire so they can get some background and demographic information.

Matt Royer

0 Comments Permalink
0

If you are interested in learning more on each specific use case, what they are, what they do & the AMT architecture overall,check out this link.

 

http://softwarecommunity.intel.com/articles/eng/1032.htm

 

Key Items in here:

  • capabilities overview

  • use case features

  • hardware architecture

 

I find this helpful when discussing the interfaces, architecture & use cases.

0 Comments Permalink