Home > Intel Communities > Open Port IT Community > Intel® vPro™ Expert Center > Ask An Expert
Please note, your reply will need to be approved by a moderator before it is posted in the forum.

Post Reply to 'Re: SCCM SP1 Out of Band Mgmt AMT Client Settings' in Ask An Expert

This helps prevent automated registrations.
This helps prevent automated registrations.

By posting this content, I agree that this content is in accordance with this sites Terms of Service.

 


Replying To:

David Randall   David Randall 26 posts since
May 2, 2008
May 3, 2008
Re: SCCM SP1 Out of Band Mgmt AMT Client Settings

 

I realize your question was about the Beta build, and we've now shipped the RC (release candidate) build, but I'll answer your questions specifically about Beta first, then about the Release candidate.

 

 

FOR BETA: The only setting required in BIOS (MEBx really) to enable remote provisioning initiated by the SCCM client agent is the root certificate hash of your internal CA must be entered in the cert hash list. Now, if you've entered in the root cert hash through the MEBx (or the USBFILE utility), you've also likely had to change the MEBx password, so you'll need to add that into the list of provisioning accounts/passwords (admin is the account name, and enter the MEBx account's password as your provisioning password). We only support Enterprise mode, so AMT will need to be set to run in that mode (which is the default mode).

 

 

The beta actually supports the Dell 3.0 firmware version. There were some changes between Beta and RC that required 3.2 - so if you're testing the RC, you'll need the 3.2, but if you're still testing the Beta version, you can use your Dell 755's with the 3.0 firmware. And, Matt's comment about the translator applies to 3.0 firmware for the final release of SP1 - you'll need that if you have systems that aren't updated to 3.2, or you have 2.1, 2.2, 2.5 or 2.6 AMT in your environment.

 

 

FOR RC: The only setting required in BIOS (MEBx really) to enable remote provisioning initiated by the SCCM client agent is the root certificate hash of your internal CA must be entered in the cert hash list. Again, if you've added the cert hash manually, then enter the MEBx password into the "Provisioning/Discovery" account list.

 

 

SCCM can automatically register an alias in DNS for the out of band service point (checkbox option in the Out of Band Management properties in Component Configuration), so you wont' need to update the firmware with the IP address or name of your provisioning server (unless you want to).

 

 

Lastly, if you have downloaded the release candidate from the connect.microsoft.com web site, you should take a look through the help file. Click the search tab, and type in "out of band" to find all the AMT related content. There are step by step walkthroughs of setting up your certificates, cert templates, and lots of information on the prerequisites and specific requirements.

 

 

Hope that helps, and please ask more questions if you have them.

 

 

Dave Randall

 

 

Think of a tag as a simple category name. You can categorize your documents, discussions, and blog posts with any word or words that makes sense.