Currently Being Moderated

Infrastructure Prep Checklist for Microsoft SCCM

VERSION 10

Created on: Nov 13, 2008 3:23 PM by Gary Szolnoki - Last Modified:  Jul 17, 2009 3:16 PM by PECAdmin

Use this checklist to ensure prerequisites are completed before deploying Intel(R) vPro(TM) technology in your enterprise.


The following resources may be of interest in understanding the Intel vPro provisioning process within an SCCM environment:

 

 

 

Microsoft Technical Reference Material

The referemce material available includes the following:

 

 

 

Refer to the SCCM Quick Start Guide for details on performing the steps listed below.

 

Complete

Task

Comment

Install SCCM SP1

Installed and configured to support vPro systems.

Install any SCCM hotfixes

Required Software Bundles and HotFixes (KB’s) for System Center Configuration Manager SP1\

Establish Active Directory OU

The OU will store AMT objects for each vPro system that will be managed OOB.

OOB Service Point

Installed on Windows 2003 Server requires Windows 2003 SP2 with hotfix 942841\.

Windows Remote Management

Windows Remote Management (WinRM\) installed on each SCCM server that the OOB Service Point installed.

Remote Configuration Certificate

3rd Party Remote Configuration Certificate on each OOB Service Point to Provision vPro systems (e.g. VeriSign, GoDaddy, Comodo, and Starfield).

Alternatively, you can generate your own Provisioning Certificate from your Enterprise CA. However, this requires you to manually enter the CA hash into the MEBx of AMT (http://technet.microsoft.com/en-us/library/cc161804(TechNet.10).aspx#BKMK_AMTprovisioning1).

You can find information on the certificate and order process at http://communities.intel.com/openport/docs/DOC-2225.

 

  • Intel vPro and firmware of 3.2.1 or higher for native support from SCCM SP1.

  • Intel HECI Driver installed on the OS (see OEM for latest driver).

  • Configuration Manager Client agent installed on each vPro system to initiate the provisioning process (there are alternative methods available in the help file but this is the most effective method).

  • vPro systems joined to the same domain as the OOB Service point provisioning and managing these devices.

 

Open vPro related network ports on routers and firewalls: 9971 - Provisioning Port; and 16992 through 16995 - OOB Management Ports.

Firewalls Open

Ensure that your network and client firewalls are open to allow traffic on port.

16992 - AMT port for non-TLS communication.16993 - AMT port for TLS communication.16994 - AMT port non-secure SOL/IDER. Also used for Provisioning from SCS to AMT.16995 - AMT port for secure SOL/IDER.9971 - SCS port for communication from AMT machine during "Hello" packets (port configurable in ME/SCS Server).56666 - SOL-IDER port for communication.

.NET 2.0 Installation

.NET Framework 2.0 is a prerequisite for the installation of SQL Server or SQL Server Express, the Intel SCS Main Service, and the SCS console.

http://www.microsoft.com/downloads/details.aspx?familyid=0856eacb-4362-4b0d-8edd-aab15c5e04f5&displaylang=en.

 

For SCCM environments using .NET 1.1 and SQL2000, if a conflict of SCCM module support and .NET 2.0 exists.

SQL 2000 or

SQL 2005 Enterprise

Microsoft SQL Server is used by SCCM to host their CMDB. The embedded Intel Setup and Configuration Service will also add the Intel AMT database instance to the same database location.

Average User Rating
(4 ratings)




There are no comments on this document

More Like This

  • Retrieving data ...