Intel vPro Expert Center Blog

What Video Game Would Intel® vPro™ Technology Be?

justin.van.buren@intel.com — Fri, 08 May 2009 22:10:24 GMT

A hobby of many IT professionals is playing video games ... so we asked the question: "What Video Game Would Intel vPro Technology Be?" while at Symantec ManageFusion 2009 from March 10th to 12th. Check out the responses below from IT executives and managers, Intel partners and industry analysts.

To learn more about Intel's presence at Symantec ManageFusion 2009, go to: http://www.intel.com/go/managefusion/

What Rock Star is Intel® vPro™ Technology?

justin.van.buren@intel.com — Mon, 04 May 2009 23:22:25 GMT

While at Symantec ManageFusion 2009 from March 10th to 12th, we had a chance to talk to IT executives and managers, Intel partners and industry analysts who were all familiar with the capabilities of Intel vPro technology. In this video, they discuss what Rock Star or what type of music Intel vPro Technology could be ...

To learn more about Intel's presence at Symantec ManageFusion 2009, go to: http://www.intel.com/go/managefusion/

Video Demo of Incendio vMinder Portal: Operational Integration of Intel® vPro™ Technology

justin.van.buren@intel.com — Mon, 04 May 2009 21:19:38 GMT

While at Symantec ManageFusion 2009, we had a chance to talk with Mike Dunham, Executive Director of Product Management for Incendio Technology. In the video below, he talks about the Incendio vMinder Portal, which allows IT profrossional to utilize the Symantec Altiris Client Management Suite without needing console access. From the Incendio vMinder Portal, the IT professional can access Intel vPro technology features such as reliable remote power control that are part of the Symantec Altiris Client Management Suite.

To learn more about Intel's presence at Symantec ManageFusion 2009, go to: http://www.intel.com/go/managefusion/

Intel® vPro™ Technology Readiness Reporting with NetX Appliance

justin.van.buren@intel.com — Mon, 04 May 2009 21:07:47 GMT

While at Symantec ManageFusion 2009, we had a chance to talk with Antwune Gray, a Director at NetX. In the video below, he talks about how the NetX Appliance discovers which PCs in your business environment have Intel vPro technology, as well as the version and setup status of Intel vPro technology.

To learn more about Intel's presence at Symantec ManageFusion 2009, go to: http://www.intel.com/go/managefusion/

Video Testimonials from Fortune 1000 IT Managers on the Security Benefits of Intel vPro Technology

justin.van.buren@intel.com — Mon, 04 May 2009 21:03:02 GMT

While at Symantec ManageFusion 2009, we had a chance to talk to IT executives and managers from Disney International, Fox Interactive Media, Blue Cross Blue Shield and McCormick Spice Company and industry analysts from Enterprise Management Associates and Ptak, Noel & Associates LLC. In this video, they talk about the security benefits of Intel vPro technology - which include the ability to deploy software patches faster into the installed PC base, and the ability to quarantine infected PCs and remotely remediate them.

To learn more about Intel's presence at Symantec ManageFusion 2009, go to: http://www.intel.com/go/managefusion/

Video Testimonials from IT Managers on Symantec Altiris Client Management Suite with Intel vPro Technology

justin.van.buren@intel.com — Mon, 27 Apr 2009 01:54:04 GMT

While at Symantec ManageFusion 2009, we had a chance to talk to IT executives and managers from Las Vegas Sands Corporation, Blue Cross Blue Shield and McCormick Spice Company and Lee Bender, senior technical manager from Symantec. In this video, they talk about benefits of Symantec Altiris Client Management Suite v6.5 (and above) with Intel vPro Technology, including power management, remote diagnosis and repair, and fast call for help.

To learn more about Intel's presence at Symantec ManageFusion 2009, go to: http://www.intel.com/go/managefusion/

Enterprise testimonials: Reduce Power Consumption with Intel vPro Technology

justin.van.buren@intel.com — Fri, 10 Apr 2009 17:22:10 GMT

While at Symantec ManageFusion 2009, we had a chance to talk to IT executives and managers from Disney International, Fox Interactive Media, Las Vegas Sands Corporation and McCormick Spice Company and industry analysts from IDC, Enterprise Management Associates and Ptak, Noel & Associates LLC about Intel vPro technology and industry trends. In the video below, they discuss the impact of Intel vPro technology on power consumption reduction and energy cost reduction.

To learn more about Intel's presence at Symantec ManageFusion 2009, go to: http://www.intel.com/go/managefusion/

Updating Firmware for Intel vPro Using Altiris Software Management Solution 7

joel_smith1@symantec.com — Mon, 06 Apr 2009 22:35:44 GMT

Updating the firmware for systems with Intel vPro technology often yields significant results when configuring and using vPro functions. For example certain Dell laptops shipped with both Serial over LAN (SOL) and IDE Redirect (IDER) disabled in the BIOS. A new firmware update to the BIOS enables them. Another example is a desktop running AMT 2.1 firmware can be upgraded to AMT 2.2, which enables Remote Configuration. No matter the reason, often a firmware upgrade will be beneficial to vPro systems and the Symantec Management Platform 7, and this article covers how to deploy firmware updates using Altiris Software Management Solution 7.

Introduction

Software Management Solution has the ability to deliver and execute any module or installer made for Windows. This includes Windows capable Firmware updates. Both the BIOS updates and Intel ME firmware updates, that are windows capable, available from HP, Dell, Lenovo, and any other computer manufacturer that supports vPro that are windows capable can be sent down and executed through Software Management Solution to upgrade firmware. This document covers how to setup and configure these updates, and hopefully provide you information on caveats and other potential trouble spots.

Why Update Firmware?

The first thing you need to determine is what type of firmware update do you require? The two typical updates are the Intel Management Engine (ME) firmware and the standard BIOS firmware. How these two interact is dependent on the Manufacturer. Some manufacturers will combine the BIOS and firmware updates into a single executable. However the configuration, the updates can be delivered via Symantec’s Software Management Solution.

Examples and Reasons

For example HP has a BIOS option to enable or disable Intel AMT, and if it is disabled in the BIOS the Intel ME will not be available. Another example is the Dell laptop model Lattitude 620 Centrino vPro capable. The BIOS contains a setting to enable or disable the Serial Over LAN (SOL) and IDE Redirection (IDER) capabilities, and by default these came from the manufacturer disabled. This and other reasons for firmware updates are detailed in this list:

Dell Lattitude 620 SOL IDER disabled in the BIOS – The update to automatically enable these features without having to physical update each BIOS manually is a BIOS firmware upgrade that set these as enabled, among other fixes/updates.
Upgrading AMT 2.1 to 2.2 – Desktop models of AMT version 2.1 can be upgraded to support Remote Configuration (certificate-based zero-touch provisioning) by upgrading the Intel ME firmware to version 2.2.
Upgrading AMT 2.5 to 2.6 – Notebook models of AMT version 2.5 can be upgraded to support Remote Configuration by upgrading the Intel ME firmware to version 2.6.
Upgrading AMT 2.0 to 2.1 – Some major fixes were incorporated between versions 2.0 and 2.1 of AMT.
UUID reset fix for HP Compaq 6910p – This fixed a flaw in the firmware where sometimes Intel ME returned the UUID of all zeroes or a default UUID set in the firmware, causing duplicates. This update patches the firmware for Intel ME on these laptop models.
Upgrading Intel AMT 4.0 to 4.1 – On the newer version of AMT for laptops, fixes have been provided via version 4.1 and is available from most manufacturers.
Miscellaneous fixes to Intel ME – Other fixes have been incorporated in ME firmware updates

Obtaining the Right Firmware Update

For all BIOS updates, the manufacturer’s website should be consulted. For each vPro model you wish to update BIOS firmware with, use the following basic steps:

Go to the Manufacturer’s main site. For this example, we’ll use Dell. www.dell.com.
Choose the Support icon and click ‘Download and Drivers’.
An applet will appear where you can choose the system through several options:
1. Model
2. Service tag
3. Log in to choose from a list of systems
Once you have the right system listed, there will be a list where you can click the plus + next to ‘BIOS’.
From the provided list choose the applicable update by clicking the ‘Download Now’ link to the right. The download will usually be in the form of an EXE.

While Intel manages the basic firmware for the Intel ME, the manufacturer packages it for deployment, including changes that may be required for specific models of vPro capable systems. It is advised that you only use the manufacturer’s Intel ME firmware updates on your vPro systems. The following walkthrough will hopefully help you identify what updates are available. For this example we’re using HP’s website.

Go to www.hp.com.
Click on the ‘Support and Drivers’ tab.
Choose the option Download drivers and software (and firmware) for Step 1 and put in the Model number of the vPro system type you wish the update for, in Step 2.
Press Enter to go to the main page for the system.
Though it prompts for what Windows you’re running, the updates are OS independent so choose any.
For the Intel ME firmware updates, the categories differ. For HP it’s under simply ‘Firmware’. Other potential categories include:
1. Firmware
2. System Firmware
3. Chipsets
Click Download to the right of the applicable ME update.
Once the EXE is downloaded, move on to the next section.

Rolling out the Firmware Update

Once you’ve obtained the EXE, it’s time to configure a Software Management Solution Software Resource, Package, associated Command lines, and create a task to roll it out with. It’s important to understand how, depending on how the manufacturer packaged the EXE, the rollout can be accomplished silently without user interaction. Typically administrators do not want users to interfere with the rollout, or to even be aware of it. The following walkthrough considers this the desired result; however the configuration can be changed as so noted where applicable below.

Creating a Software Package/Program

On the Notification Server place the EXE you downloaded for the firmware update into a self-contained folder. The folder and everything in it will become a “package” for the Software Resource, thus it is recommended to have only the needed file therein.
Note: You can use another storage location if you prefer, such as UNC or URL. Simply adapt these steps to fit your preferred source method
In the Symantec Management Console browse under Manage > and choose Software.
In the left-hand tree browse under Software Catalog > Deliverable Software > and select Updates and Service Packs.
In the resulting right-hand pane, click the Add button and choose Software Update.
Above the configuration tabs provide a name for the Update. In this example we’ll use an HP 6930p laptop firmware update of the Intel ME to version 4.1.1.1028.
Click on the Package tab.
Click the Add package button.
Provide a name for the package and browse to the location referred to in step 1. The name we’ll use in this example is AMT 4.1 Firmware EXE(Windows) for HP 6930p. See this screenshot for an example:
Click OK to save the Package details.
Click on the Add command button.
Provide a Name for the command-line. For this example we’ll use: Apply AMT 4.1 Firmware Update silently.
Check the option labeled Command line requires a package and ensure that the Package you created previously is selected.
Under Installation file type choose the option labeled EXE Software Installation File.
Change the Command type to Install.
Provide a silent command line under the Command line field (this is the potentially difficult part. The update I tested with had no documentation on silent installs and I had to tinker to find the –s command-line that ran it silently. ie: “sp42026.exe” –s).
NOTE: Due to the nature of firmware updates, it is possible the EXE will want to reboot the system. It is recommended to test the execution and adjust the command-line to suppress the reboot so no user is interrupted in their work.
See the below screenshot for an example:
Click Save changes to complete the Software Resource creation.

Creating a rollout Task

The next step is to create a Quick Delivery Task that pushes out the update. While a Manage Delivery Job may be used, because of the nature of firmware updates reapplying an update may have unintended consequences so for this example we’ll use a Quick Delivery Task. Follow these steps to create the Task:

In the Symantec Management Console browse under Manage > and click Jobs and Tasks.
In the left-hand tree browse down through System Jobs and Tasks > Software > and select Quick Delivery.
Right-click on the Quick Delivery folder > choose New > and click on Job or Task.
Within the resulting window choose Quick Delivery from the left-hand tree.
Provide a name for the task. In this example we’ll use AMT 4.1 Firmware Update for 6930p Rollout.
Under the Software resource dropdown choose the name of the Software Resource you created. In this example it is AMT 4.1 Firmware Update for HP 6930p.
NOTE: The dropdown is also a type field so you can start typing AMT 4.1 to have the selected software found and displayed in the dropdown.
Ensure that the Command line and Package in the two subsequent dropdowns correctly show the Command-line and Package you created. For our example they are Apply AMT 4.1 Firmware Update silently and AMT 4.1 Firmware EXE(Windows) for HP 6930p respectively.
Click the Advanced button.
Under the Download Options typically what is configured at the Altiris Agent level should be sufficient for your needs. Click the Run Options tab.
This is your execution environment. Due to the nature of firmware updates, it is advisable to use the option labeled Altiris Agent credential.
NOTE: Specific user can be used if you wish to provide an account that has Administrator rights on the target systems directly.
Under User run conditions check the option labeled Allow user interaction. We have found that this option improves success rate due to loading a fuller user stack.
Change the Display window to Hidden. See this screenshot for an example:
Click OK to save the Advanced options and Click OK on the main Task configuration page to save the details of the Quick Delivery Task.
You can use the Quick Run under the Task Status section to test the rollout. Please see the section following labeled ‘Test the Rollout’. It is vital to properly test the rollout so any corrections can be made before rolling it out generally.
Set a schedule. You can choose Now or set a specific scheduled time if needed.
For the next step under Input you’ll need to manually add devices for this firmware update to be run on or select a target. Step 17 covers how to create a target for the example we’re using in this sequence. If you are only adding machines manually step 17 is not required. Move to step 19.
To create a target based off of Inventory Solution data that automatically targets the HP Compaq 6930p laptops, follow these steps:
1. In the Symantec Management Console browse under Manage > and click on Filters.
2. Browse under Computer Filters and select or create a folder to create the filter in.
3. Right-click on the folder and choose New > Filter.
4. Name the Filter. In our example we’ll use All HP 6930p Laptop Computers.
5. Under the Filter Definition dropdown choose the option Query Mode: Query Builder. You’ll receive a notice: You are about to switch to the other query editing mode. This cannot be undone after save. Click OK to continue.
6. Expand the Filter Definition section by clicking on the down-arrow to the far right.
7. Under the query section, select the tree item ‘Resource’ and click the red X delete icon.
8. When the page refreshes on the right you’ll see a Base Resource Type. Choose Computer. When prompted, choose to continue.
9. Under the actions section to the right, click the link labeled Use Fields & Data Class Attributes.
10. In the resulting picker type in or choose from the dropdown the data class and column you wish to reference. For our example choose [Logical Device].[Model] and click OK.
11. Click the Filter Expressions tab.
12. Click the Add Condition button and choose one of the options (for a first filter it doesn’t matter).
13. Type the same data class and column selected previously. In our example type [Logical into the If: field and then select [Logical Device].[Model] from the dropdown.
14. Choose Like in the next dropdown to the right (or if you know the exact value you’re looking for, use Equals).
15. In the last field type the model number. In our example type %6930p%. See this screenshot for an example:
16. Click the Save Changes to complete the Filter.
To add the Filter to the schedule, go through the following steps:
1. Under the Task Status click the button New Schedule
2. Set the schedule as desired.
3. Under Input click Add and choose Target.
4. Click the Add rule button in the resulting window.
5. In the first dropdown choose the option labeled exclude the resources not in.
6. Leave Filter as the option in the second dropdown.
7. In the third dropdown type in the first words of the filter you created in the previous step. In our example type All HP and click the dropdown arrow. Select the appropriate collection from the list.
8. Click OK to save the Target.
Click Schedule to apply the Task to the selected systems.
Done! This Task type will use Task Server to push out the task. For systems already online they should receive the task within minutes based off of being active on the network. For systems not on, the next time they come online and check for Tasks, Task Server will push out the Task at that time.

Test the Rollout

The most important part of this process is to test the rollout. This will allow you to make corrections to the command line or execution environment should the first attempt fail. By testing the rollout you can ensure it is ready for the greater environment. In testing, you should:

Target a system that matches your Production Environment as closely as possible
Test the command-line to ensure it successfully and silently rolls out the firmware update. You can accomplish this by copying the files over and running the command line manually from a command prompt or from Start > Run.
Check the BIOS or Intel AMT for versioning change.
Note: the ME version may not be synched with the AMT version. A good test is to try executing the update again manually to see if you receive a message indicating the version is already up to the latest version.

Conclusion

Using this process, you should be able to remotely update any firmware required for successful use of Intel vPro Systems both with Setup and Configuration using Out of Band Management, and vPro functionality use within any Job and Task in the Symantec Management Platform.

Fast Call for Help Video Demo - Altiris Client Management Suite v7 and Intel vPro technology

justin.van.buren@intel.com — Fri, 03 Apr 2009 06:34:51 GMT

At the recent Symantec ManageFusion 2009, Symantec announced the general availability of Symantec Altiris Client Management Suite Version 7.

One of the new features in Symantec Altiris Client Management Suite Version 7 is support for Intel Centrino 2 with vPro technology's "Fast Call for Help." The video below by Symantec's Senior Technical Manager Lee Bender is a demonstration of how an end-user would connect back to the Altiris Client Management Suite for remote diagnosis and repair of his notebook even though he connect boot into Windows and is outside of the corporate firewall.

To learn more about Intel's presence at ManageFusion 2009, please go to http://www.intel.com/go/managefusion/

Highlights of Gregory Bryant (Intel VP) in the opening Symantec ManageFusion 2009 keynote

justin.van.buren@intel.com — Fri, 20 Mar 2009 16:57:30 GMT

On May 10th, Intel Vice-President Gregory Bryant was part of the opening ManageFusion keynote led by Symantec's Steve Morton.

Gregory talked about how customers are realizing value today with Intel vPro technology and getting a return on investment that pays for itself in less than one year. He also talked about new Intel vPro technology product developments with Altiris Client Management Suite Version 7 and Symantec Workspace Streaming. View the highlights below or click here to see the full keynote.

Intel and Symantec Land a Haymaker on Energy Costs

scott1.e.smith@intel.com — Thu, 12 Mar 2009 20:04:49 GMT

Intel and Symantec have landed another punch on the chin of excess energy use. In an enhancement akin to putting a horseshoe in a boxing glove, Symantec’s new Altiris Client Management Suite 7.0 takes advantage of Intel vPro technology’s latest capability to extend IT’s reach outside the corporate firewall.

As a result, IT can literally shut the lights out on the PCs that were previously bobbing and weaving just outside its reach. Many companies have an always-on rule – everyone has to leave their computers glow all night so IT can perform routine maintenance, install patches and other tasks. Of course, this makes electric bills soar and leaves an enormous carbon footprint.

With advent of vPro three years ago, Altiris Management Suite users began turning off PCs when not in use. Intel vPro enable IT to turn them back on remotely just long enough for the task at hand and then turn them off. However, this was only as long as the PCs were on the corporate network.

With the latest version of vPro, the firewall is no longer an obstacle with a couple of benefits. First is extending IT’s reach, but second is enabling those remote end-users to place a fast call for help. With a few keystrokes, a telecommuter or traveler with computer trouble now can immediately connect with IT for a fix. But, of course, wasted energy isn’t the only opponent IT is nose to nose with these days.

The shrinking IT budget has a number of moves that has IT professionals worldwide feeling punch-drunk. In this conversation, Intel Product Manager Tracie Zenti and Symantec Strategic Alliance Director Kevin Unbedacht discuss additional tactics, including a rather counterintuitive approach in a recession – spending money to save money. I hear you, but give them a listen, especially how the State of Indiana saved $1.4 million.

Introduction to Out of Band Management 7.0

joel_smith1@symantec.com — Wed, 14 Jan 2009 17:14:24 GMT

The release of the Notification Server 7.0 platform will provide a new design and infrastructure. Out of Band Management will also provide a new release with this platform. First I’ll provide a brief description of what Out of Band Management is used for. This article will also cover the differences between the 6.2 version of Out of Band and version 7.0. The changes include UI improvements, relabeling to be in line with current Intel terms, and the addition of limited Dash support.

INTRODUCTION

Out of Band Management 7.0 allows an administrator or IT Professional to setup and configure several protocol technologies for use in the greater Notification Server infrastructure, or even any other solution that supports the protocols handled by Out of Band Management. The supported technologies are:

Intel AMT (Active Management Technology) or vPro
ASF (Alerts Standard Format) primarily from Broadcom
DASH technology support (open architecture)

The greater focus is on Intel’s AMT technology. Using the provided configuration pieces with Out of Band, systems with the above technologies can be configured to respond to functions called from either the RTSM interface or via Task Server. Once configured, the Notification Server is a trusted entity to the local systems and all available functions are available.

More information can be found by browsing through the articles generated on Out of Band Management 6.x at http://www.symantec.com/community/intel.

Terms/Term changes

It’s important to understand the changes in terminology and labeling so the transition from 6.2 to 7.0 Out of Band Management goes smoothly. This section will also help explain the naming scheme for Out of Band Management. The following list provides the term, and the previous label (if different), and a brief description:

Configuration, AKA Setup and Configuration – Previous term: Provisioning – Intel has standardized on using Configuration as the term for activating a vPro system. This more aligns with what is occurring and avoids confusion with basic industry understanding of what provisioning means (putting an OS on the system).
NOTE: Since this word is used throughout documentation for 6.x it is important to understand the change!
TLS – Transport Layer Security can be considered the next generation of SSL (Secure Sockets Layer). It’s used in 2 sections of Configuration: Remote Configuration authentication, and TLS within the Configuration Profile.
Remote Configuration – This specifically means the process for automatic Configuration via the handshake with a TLS certificate, usually purchased from Verisign, GoDaddy, Comodo.

Out of Band Portal

Out of Band Management now has a Portal page that provides access to most function from a user-friendly UI. It’s accessed in the Symantec Management Console by going to Home > Remote Management > and click on Out of Band Management. The following screenshot shows a view of the portal:

The upper left-hand pane shows a list of setting groups that will enable a user to go through those steps necessary to enable or complete Out of Band setup and configurations. Please note the following items and what they can be used for:

Configuration Service Settings – This provides all the nodes that are used in the Setup and Configuration process for AMT.
Basic Configuration (without TLS) – This takes you through the process of setting up Configuration where TLS will not be used in the Configuration Profile (not to be confused with Remote Configuration TLS). See this screenshot for the way the steps are setup:
Enable Remote Configuration – This walks you through setting up the Notification Server to accept Configuration requests using TLS certificates. Note that 2.6, 3.0+ AMT systems are automatically configured to send out requests using this method.
Enable Security (TLS) – This walks you through setting up the Notification Server to use TLS when managing AMT systems.
Intel AMT Tasks – This is a quick area that reveals the Task Server tasks that directly utilize AMT.
Configure Site Server – This is a link that opens the Site Server Configuration page as part of the Notification Server Platform. This is available here because OOB has a Site Service that can be deployed to Site Servers.

As a note, Site Servers allow distribution of Out of Band functions across the environment, and helps alleviate any problems with large rollouts involving a large amount of Configuration. This brings us closer to having true hierarchy support with Out of Band Management.

UI Changes

Those who are familiar with Out of Band Management 6.2 can use this section to find corresponding functions, configuration pages, and utilities when upgrading to Out of Band 7.0. If you are unfamiliar with this version skip to the next section.

Out of Band Management looks much the same as it did in 6.2, with some notable exceptions. The following items cover the differences between the two. The method used to reach the console area for Out of Band Management is as follows: Browse down through Settings > All Settings > in the left-hand tree browse down through Remote Management > Out of Band Management. The three subfolders are by the same name as they were in 6.2, lacking the fourth folder: Delayed Provisioning.

*Provisioning > Configuration – I called this out previously in this article but with my experience the double-exposure is necessary. In reference to managing vPro AMT systems, consider the previously used term Provisioning to now be Configuring, or Provision to now be Configuration. If you’re like me and have the word provisioning ingrained in your mind, it will take some getting used to.
Auxiliary Profiles – Three new nodes have been added to this folder. They are described below:
1. Management Presence Server – (MPS) This is the secure gateway CIRA technology will use to connect securely with the network where the NS resides for remote management from anywhere on the Internet.
2. Remote Access Policies – In relation to the above MPS, this policy dictates how CIRA connections are handled by the Notification Server.
3. Trusted Root Certificates – Also in relation to MPS, these are required to establish so that trust can be formed from the calling AMT system, the MPS, and the Notification Server.
Configuration Profiles – Formerly known as Provision Profiles. The following items have been added as tabs within the profile configuration. Descriptions of the items are supplied as well:
1. Domains – Allows the ability to configure AMT to operate in more than one Domain.
2. Remote Access – This ties directly to the Remote Access Policies found under the Auxiliary Profiles node. Edits here will take effect in both places.
The remaining nodes under the Configuration Service Settings folder are the same between versions 6.2 and 7.0.
Delayed Setup and Configuration – Formerly known as Delayed Provisioning, this has been renamed to fit the proper naming convention. It also no longer has its own folder, but can be found under the Intel® AMT Systems folder above the Intel AMT Systems node.
The following screenshot shows the layout of the console:

Intel SCS

The component that Out of Band Management plugs into has not changed between versions. Intel SCS (Setup and Configuration Services) is still the backbone of Out of Band, and handles all the transactions between the server and the remote Intel AMT clients during the Configuration process. Please note that management functions of AMT are NOT handled by Intel SCS. SCS stands for only the Configuration process, including maintenance and reconfiguration tasks (for example for profile updates) as part of maintaining the configured state.

Out of Band Management 6.2 used Intel SCS version 3.0 (or 3.2.1 per the Knowledgebase article found at this location: https://kb.altiris.com/article.asp?article=40076&p=1). Intel SCS version 5.0 ships with Out of Band Management. While the UI does not reveal all the additional capabilities, SCS 5.0 comes with a tool called Activator. This utility can handle a number of scenarios that were sticky points in the previous versions of Out of Band and Intel SCS. The abilities include the following:

FQDN Name Change – The Activator, when run on the local AMT system, can tell AMT to send updated information to Intel SCS on its FQDN. This is especially important if the FQDN has changed in Windows, thus changing the identity of the machine.
- The problems associated with this are the failure of AMT systems to authenticate using TLS due to FQDN sensitivity if enabled, and also the inability of Intel SCS to contact back a system whose FQDN has changed.
Resending of Hello Packets – While the 3.0 version of Out of Band had the ability to send Hello packets using the Delayed Provisioning (AKA Delayed Configuration) task, it did not have the ability to send PSK (pre shared keys) packets if the 24 hour cycle of the hello packets sequence expires. This functionality was also added to verison 3.2.1 of Intel SCS.
- The problems associated with this are when systems are not configured within that 24-hour cycle they need to be acted upon to get the needed information to the server for configuration.

The above two functions can be utilized by sending Activator down using a Delivery Software job in the Software Management Solution.

Conclusion

Hopefully this introduction will help those familiar with Intel vPro, and especially familiar with Out of Band Management in the Notification Server 6.0 infrastructure, to understand the changes and functions in version 7.0 of Out of Band Management. In depth articles will be generated in the future to cover some of the new features such as the MPS and CIRA functionality.

Hands-on Learning event - Symantec and Intel vPro - Nov 7th

terry.c.cutler@intel.com — Fri, 31 Oct 2008 20:02:56 GMT

If you are near Columbia, Maryland and want to attend a hands-on learning event - register at the link below

http://www.syssrc.com/html/training/FreeSeminars.cgi?function=seminars&seminar=512

Reducing Desktop and Mobile Operating Costs: Altiris with Intel vPro

Don’t share this BLOG with your finance Analyst or your ECO team, they will not be happy! ..

josh.hilliker@intel.com — Wed, 15 Oct 2008 05:57:09 GMT

Brush off your calculator, this number is certainly going to make you cringe.. “ 1984 Tons of CO2 a year. “

If you leave your PC on AT night it will cost you money & contribute to your carbon footprint (NOT GOOD)!.

I’ve talked about power management for some time now & I’ve focused on the importance of power management, however what I have not talked about is the $$’s, #’s and the hard data. Let me use this opportunity to do so. After spending the last few months learning even more about power I would like to go after a few power data points (Power Points  ) that I think are going to make you cringe.

First let’s look at how electricity is made worldwide - here’s a graph from - http://www.eia.doe.gov/oiaf/ieo/electricity.html showing worldwide electricity generation by fuel 2005-2030. Coal is of course the #1 source worldwide for electricity generation.

Now let’s peak into the US. On Wikipedia.org @ http://en.wikipedia.org/wiki/Electricity_generation

In the US – 48.9% of electricity is created by coal. At this point your probably wondering where I’m headed on this blog and what is my point.. well. If we know that coal worldwide is #1 and in the US it has 48.9% of generation source, then when we talk about not using electricity it should be a good thing ($$’s, eco friendly, etc..) So let’s model it out. !

________________________________________

First we need to lay out a few assumptions around what is a Managed PC & NON Managed PC.

• Here in this EPA presentation it discusses power cost comparison for both. http://eetd.lbl.gov/EA/Reports/39466/39466-2

• For this blog we are discussing a “Managed PC” and we are utilizing the energy star calculator located @ http://www.energystar.gov/ia/products/power_mgt/LowCarbonITSavingsCalc.xls

• Assuming a install base of 1000 well managed PC’s

What is the Output?

1000 well managed PC’s =

1,232,676, kWh of savings (CFO’s cringe)

1984 Tons of CO2 (Eco folks cringe here)

Now let’s make this specific by region on the US, if you utilize the following power rate’s - http://www.jea.com/services/electric/rates_quarterly.asp and since I’m headed to Florida I’ll utilize the current rate between $110-114/1000kwh, this equals $140k (Finance analyst take note –

WOW

is the response I’m looking for. )

Now for certain regions of US the story ends here, however for power districts where coal is the source of electricity generation we move on to CO2. Taking an average passenger car which produces 5.2 Ton’s of CO2 per year (quoted from EPA Site http://www.epa.gov/OMS/climate/420f05004.htm#issue.). If you take that same 1000 PC’s that equals 1984 tons of CO2 a year, make them vPro, manage them, you can potentially put the

equivalent of 400 cars off the road per year.

Sounds great right.. of course, now if you look at the 3 following case studies you will see more specific to Health & Education .

#1. Cleveland Clinic - http://communities.intel.com/openport/docs/DOC-1915

This article describes how Cleveland Clinic will achieve positive ROI of $442,000 in net power savings over 4 years and will also save 29,000 IT support man-hours in the same time period.

#2. University of Plymouth - http://communities.intel.com/openport/docs/DOC-2020

Recently, the University of Plymouth completed a refresh of their 4,800 desktop PCs, upgrading the systems to PCs with Intel® Core™2 processors with vPro™ technology in order to offer students the latest in IT services. The university was particularly interested in Intel® vPro™ technology because of the potential to allow intelligent power management, which could reduce power consumption and reduce the university’s carbon footprint.

#3. IOT - http://communities.intel.com/openport/docs/DOC-1703

The State of Indiana’s newly consolidated Indiana Office of Technology (IOT) conducted a manageability assessment of PCs with Intel® Core™2 processor with vPro™ technology1. Their decision to convert 20,000 desktop systems to PCs with Intel® vPro™ technology within four years was based on reduced operational expenses2. The challenge was the consolidation of several IT service groups serving different agencies into a centralized service delivery organization while improving customer service and decreasing support costs

NET NET:

vPro Managed PC = Lower costs for POWER = Reduce Carbon Footprint

________________________________________

Let’s take this to action now: 2 part story here, 1) what are the management consoles doing 2) what can you do with power software in the mix.

Scale out w/ the following power jobs:

*Altiris - http://juice.altiris.com/article/2182/utilizing-intel-vpro-amt-technology-with-task-server-part-1-power-management

What are the leading software vendors saying?

JamieK’s blog on vPro Expert Center - http://communities.intel.com/openport/blogs/proexpert/2008/06/03/intro-to-verdiem-and-pc-power-management

 Verdiem web site http://www.verdiem.com/surveyor5/default.asp

A typical PC consumes nearly 600 kWh of electricity annually. SURVEYOR can help reduce that energy consumption by an average of 200 kilowatt-hours (kWh) per PC annually. In a PC-intensive organization, this typically represents a 3-6% annual reduction in total electricity consumption, saving an average of $20-$60 per PC annually. Additionally, by eliminating PC network energy waste, organizations also reduce associated CO2 greenhouse gas emissions.

 1E doc on the climate savers site: http://www.climatesaverscomputing.org/docs/Energy_Report_US.pdf

Power management software can reduce a PC’s power consumption by 80 percent, allowing com¬panies to save between $25 - $75 per desktop PC.28 Beyond automated “shut down,” power savings are derived during the day by automating monitor shut-down after a period of inactivity.

At 8.68 cents per kWh, a typical PC left on overnight wastes $55.13 a year. That’s more than $165,000 for a 10,000-PC enterprise that leaves 60 percent of its machines on, and $1.72 billion for the 60 percent of work computers that may be running across the country each night unnecessarily.

So… why did I say “Don’t share this BLOG with your finance Analyst or your ECO team, they will not be happy! .. “ Well if you’re the last to know about vPro and you have it in your IT shop, that could be a fun conversation to have with your CIO & CFO. So. “don’t be the last to know about vPro”..

PRIOR ENERGY BLOGS

Saving energy part III - http://communities.intel.com/openport/blogs/proexpert/2008/05/15/saving-energy-part-iii-verdiem-nyquil-for-energyhog-pcs-

Saving Energy part II - http://communities.intel.com/openport/blogs/proexpert/2008/04/24/saving-energy-part-ii-managefusion-material

Saving Energy Part I - http://communities.intel.com/openport/blogs/proexpert/2008/04/10/saving-energy-does-it-matter

Eco Friendly PC - http://communities.intel.com/openport/blogs/proexpert/2008/06/17/i-have-the-first-eco-certified-computer-in-my-lab-yes

Announcement of EcoFriendly PC - http://communities.intel.com/openport/blogs/proexpert/2008/04/29/first-eco-certified-computer-interesting-article

Is Altiris RTSM required to configure and utilize vPro?

terry.c.cutler@intel.com — Fri, 03 Oct 2008 01:54:36 GMT

The answer might surprise you...

See http://juice.altiris.com/node/5830