This post is the first in a series about configuring Intel vPro with the Linux operating system. The motivation for this series is that Intel vPro has been adopted for embedded systems such as ATMs, Digital Signage, Kiosks, etc. and the knowledge to do it is almost tribal. In this post, I would like to introduce the Intel SCS 7.2 that was tailor made for Linux and the following posts I’ll demonstrate how do it with more details.
As I mentioned, Intel® Setup and Configuration Service 7.2 (aka SCS 7.2) is a special version designed for the Linux operating system on an Intel vPro machine. However, the capability presented in this version is not the same that is present in Intel SCS 7.1, which is designed for the Windows operating system. Intel SCS 7.2 brings only these two components:
Configurator (aka. ACUConfig): A command-line application that runs locally on the Intel AMT system. You can use this tool to configure the system using an XML file (i.e. Host Base Configuration) or Manual configuration through a USB key.
Configuration Profiles: XML files that contain configuration settings for the Intel AMT devices.
However, these components are more than enough to cover most usage cases:
- Desktops running Linux where you want user consent with remote operations such as KVM;
- Embedded Devices that are in a staging area to be completely prepared before deployment; the configuration can be performed by a USB key (i.e. manually);
At this stage, this version only works with Intel vPro with firmware version 7.1.2 (or later) and Intel SCS was tested only on SUSE Linux Enterprise Desktop (SLED) 11 Service Pack 1, however there are no reasons for it to not work with different Linux flavors.
In order to create the Configuration Profiles (i.e. XML files), you will need the ACU Wizard found in Intel SCS 7.1 under ACU_Wizard folder (it requires a Windows machine to execute it).
In order to bridge the communication between the Intel ME (aka. vPro firmware) and Linux OS, there are two components required: Intel® Management Engine Interface (Intel MEI) driver and Local Management Service (Intel LMS) driver. Intel® MEI driver allows application, such as ACUConfig, communicate with the firmware using host interface, and LMS driver allows applications to access the Intel® ME via local Intel® MEI.
If you are not using a Linux kernel version 3.0 or later, you should install these drivers that can be downloaded here.
In the next blog I’ll show you how configure an Intel® vPro machine running Linux in Admin Control mode using manual configuration (i.e. USB key).
For further information about how to enable Linux for Intel® vPro, read this document.