One of the new additions to Config Manager SP2 is native support of wireless access for managing clients with AMT.  Microsoft has built in support for configuring enterprise level wireless profiles such as WPA2-Enterprise.  These are wireless profiles that support RADIUS authentication using an authentication server to decide whether or not a given client is allowed to access the network.  Config Manager SP2 does not support wireless profiles that use pre-shared keys (PSK).  If you use security standards like WPA2-PSK/WPA2-Personal in your environment you will need to use the scripting framework tool to generate a script that can configure this option outside of Config Manager.

Mohan Veeramachaneni has put together several guides that explain how to configure the back-end RADIUS authentication components and access point configuration.

Cisco ACS

Configure Cisco ACS Server for Navigating Secure Networks with AMT/vPro

Microsoft NPS

Simple Configuration of Microsoft NPS as Radius for 802.1X - Part 1

Simple Configuration of Microsoft NPS as Radius for 802.1X - Part 2

Microsoft IAS

Step-by-step Guide for Navigating Secure Networks (802.1x) with Intel® AMT™ using Microsoft® SCCM SP1 & Microsoft® Radius (IAS)

Matt Royer has a blog entry that covers wireless profile management in Config Manager SP2.  The process he outlines is still the same in the release version of SP2.

http://communities.intel.com/community/openportit/vproexpert/microsoft-vpro/blog/2009/06/05/a-closer-look-at-sccm-sp2-beta-oob-wireless-management-wireless-profile-management

Key things to remember about wireless management with Config Manager

• Config Manager will not update a wireless profile that is currently in use.
• Config Manager now uses DNS entries to resolve client names.  You may run into a case where a client has switched between a wired or wireless connection and AMT is temporarily inaccessible due to delays in DNS update propagation.  DNS caching on your Config Manager server can also cause this to occur.  You can try running the “ipconfig /flushdns” command from a command prompt to clear the local DNS cache on your Config Manager server.
• Launching a Serial-over-LAN session over a wireless connection while the client’s OS is using that same connection will cause the wireless network to be cut off to the OS.

Here is a demonstration I created on how to setup a SCCM advertisement to remotely and securely wake-up (boot) Intel vPro systems and push an automated BIOS upgrade.  I wanted to show a useful and real-world Intel vPro Use Case that you can use today.  If there are other Use Cases you would like to see, please post your comments and I will get more of these types of videos posted.

Thanks,

Bill

this weekend I received a link that had a pretty good Q&A from Microsoft about OOB (out of band management). I found it a good resource to answering typical questions that are brought up during a Pilot of the technology.

http://blogs.technet.com/wemd_ua_-_sms_writing_team/archive/2008/10/03/overflow-additional-quiz-questions-for-out-of-band-management-amt.aspx

Enjoy the Q&A. Thank you Sergio for forwarding it..

If you are using SCCM SP1 with AMT 3.2.1 machines (ex: HP7800P) and you see the following error.. this post is for you.

Here is what MEinfo read back during this state of detection

If you do, no need to be frustrated, just need to run a couple of steps to get back on the road. You can utilize Matt Royer's blog at Intel AMT 3.2.1 Self-signed certificate issue and working around it for Microsoft System Configuration Manager SP1

For me I had to give it a go myself, so Nick & I did the following:

• secured our SCCM environment

• borrowed 2 new HP boxes in the box

• downloaded the vbscript file, wsman translator.

After 3 trial runs at it, we captured the video today and here it is. Here are the top things I wish I knew prior to installing:

#1. OOB settings is under component configuration (Under site settings) in SCCM

#2. Having your cert (*.pfx) file downloaded and handy is important (and it's in the dictionary)

#3. Make sure you run the following: winrm set winrm/config/client/auth @{Basic="true"} on the console your running the box on

#4. Be patient - this was the single hardest thing during this process for me..

Here's the video.

My recommendation, if your stuck in this state on your machines, follow Matt's blog, check out my video and then ask if any questions..

At MMS, Kiron Lahiri, Lead Systems Engineer for Client Systems, and Brian Boresi, Information Services Division, both with Sisters of Mercy Health System, talked about some of the powerful benefits of combining Intel vPro technology with Microsoft System Center Configuration Manager. Listen to the video and see how Sisters of Mercy Health System is benefiting from this combination of hardware and software in their infrastructure.

]]>

To see more videos from MMS, go to http://www.intel.com/go/mms/

While at MMS, we talked to two Service Integrators about Intel vPro technology with System Center 2007 - including the combination of Intel® vPro™ technology with System Center Configuration Manager 2007 for medium to large businesses and the combination of Intel® vPro™ Technology with System Center Essentials 2007 for small businesses.

]]>

To see more videos from MMS, go to http://www.intel.com/go/mms/

While at MMS, we had the opportunity to talk with D.C. Tardy, System Architect at EDS. He talked about the Return On Investment of Intel vPro technology, including a Canadian Call Center case study that returned a savings of almost $750,000 across 3 years. He also talked about the combination of System Center Configuration Manager with Intel vPro technology.

]]>

To see more videos from MMS 2008, go to http://www.intel.com/go/mms/

While at MMS, Brad Anderson, General Manager of Microsoft Management and Services Division, and Gregory Bryant, Intel Vice President and General Manager of the Digital Office Platform Division, talked with executives from Fortune 5000 companies about the benefits of Microsoft System Center Configuration Manager 2007 with Intel vPro Technology. Watch the video below that highlights this discussion.

]]>

To see more interviews and other videos from MMS, go to www.intel.com/go/mms/