Skip navigation

If you are near Columbia, Maryland and want to attend a hands-on learning event - register at the link below


Reducing Desktop and Mobile Operating Costs: Altiris with Intel vPro

Sponsored by System Source

Presenters include Symantec and Intel

9:00 a.m. - 2:30 p.m.

Columbia Hilton Hotel, 5485 Twin Knolls Rd, Columbia, MD. -Directions: 410-997-1060

Need information on vPro and certificates? Check out this new wiki.


Go to

Check out this short video clip on the fast call for help feature in AMT 4.0 and checking out the BIOS via SOL.



Use case guides were just published for Microsoft SCCM, as well as the Intel Client Manageability Add-on for Microsoft SMS (formerly known as the Intel AMT Add-on for Microsoft SMS).


These guides are often referred to as recipe book or solution guides. They will show you how to set up power on/off, remote diagnosis and repair, and more.


Check them out here:


Use Case Guide for Microsoft System Center Configuration Manager (SCCM)


Use Case Guide: Intel(R) Client Manageability Add-on for Microsoft SMS

I was out 2 weeks ago @ ManageFusion in Orlando and this video was played. I realize this is more in the humor & fun category, however thought you may enjoy this one.   (also note none of these folks are me in the video - you couldn't get me to jump out of a boat in Seattle).   Enjoy..



Check out this new paper - it provides step-by-step instructions for purchasing a cert from Go Daddy and then installing it for use with LANDesk 8.8.



Today I was sent this URL, checked it and was impressed enough to share it with the community. 


It gives you the ability to either map from a code name or a platform and find all ingredients that apply.   This answers a lot of questions that i get asked & I see the community asks around vPro.   Enjoy.


also if you have a good URL like this for a specific OEM please comment at the bottom of this blog.  Thank You


Josh H

Microsoft SCCM 2007 SP1 Intel vPro Training Videos

We’re pleased to announce the availability of Microsoft SCCM 2007 SP1 Intel vPro Training videos. During a recent training event in Redmond, Washington, we had the cameras rolling for this detailed and robust training experience and it is now available for you to experience and utilize.


Below is an overview and link for each training section.




               Technical overview of Microsoft System Center Configuration Manager 2007 SP1 support of Intel vPro technology with specific focus on supported use cases, provisioning process and infrastructure prerequisites for Intel vPro Out of Band Management.

Lab Module One


               Configuration steps of Active Directory and PKI infrastructure to support Intel vPro Out of Band Management within Microsoft System Center Configuration Manager 2007 SP1.

Lab Module Two


               Steps for Microsoft System Center Configuration Manager 2007 SP1 OOB Service Point installation, OOB Component Configuration and Network Discovery for Management Controllers.

Lab Module Three


               Steps for creating a collection for housing Intel vPro clients and configuring that collection for automatic provisioning of the Out of Band Management Controllers.

Lab Module Four


               Installation overview for the Microsoft System Center Configuration Manager 2007 SP1 client agent and initiation of Intel vPro client provisioning.

Lab Module Five


               Technical overview of the Out of Band Management Console, Intel vPro Management Engine Interface and Intel AMT power control via Advertisements.

Lab Module Six


               Configuration steps of the Intel WS-MAN Translator to support legacy Intel vPro clients (Intel AMT firmware versions less than 3.2.1).

Lab Module Seven


               Provisioning legacy Intel vPro clients (Intel AMT firmware versions less than 3.2.1) through the Intel WS-MAN Translator using PSK provisioning.

Lab Module Eight


               Overview of the Intel vPro migration process from the Intel SCS / Microsoft SMS 2003 Add-on to Microsoft System Center Configuration Manager 2007 SP1.


Please let us know if you have questions or comments regarding this material.


This resource along with other resources on the Intel vPro Expert Center can assist you in answering questions when deploying Intel vPro clients in conjunction with Microsoft System Center Configuration Manager 2007 SP1.

Intel is very excited about the latest release of In this latest release, both and (formerly SoftGrid) have been integrated into a single management console. Microsoft's SCCM provides centralized management for vPro clients with its Out of Band management Console and can utilize scalable infrastructure to publish, deploy and manage virtual applications with full streaming capabilities.


Below is a checklist to enable the Dynamic Duo with some added BKMs:


Obtain SCCM with Application Virtualization.


Configure Out of Band Management with your SCCM Console.


Enable SCCM Wake On LAN using Intel's® Active Management Technology (Intel® AMT): SCCM --> Site Database --> Primary: Right click ConfigMgr distribution point, click Wake On LAN, select "Enable Wake On LAN for this site" and "Use power on commands only"





Enable Virtual Applications: SCCM --> Site Database --> Primary --> Site Settings --> Site Systems --> System: Right click ConfigMgr distribution point, click Virtual Applications tab and select "Enable virtual application streaming"





Upload a Virtual Application Package: SCCM --> Computer Mgmt --> Software Distribution --> Packages: right click on "New" And you will Notice "Virtual Application Package" option. To upload a Virtual Application Package you will need a previously sequenced application using Microsoft Application Virtualization. BKM: You will need the latest sequencer from Microsoft and follow the recommended sequencing instructions. Trying to upload a Virtual Application package previously sequenced with Softgrid resulted in a "Load Virtual Application Package Failed. Error : There is no VersionGUID in this manifest file. (Note: When you open the manifest.xml file the VersionGUID is in the second line). Microsoft provides a tool to convert previously sequenced packages called SoftGrid Migration Tool.





After you have successfully uploaded a Virtual Application Package verify systems within SCCM have both AMT Status "Provisioned" and SMS Client Agent Installed "Yes". To get the SMS Client installed quickly I found this command line useful:



  <sccmServer>\SMS_<SiteCode>\Client\ccmsetup.xex /mp:<sccmServer> SMSSITECODE=<SiteCode> /BITSPriority:FOREGROUND





Enable the client to accept Advertisements. During Boot Ctr+P into the Systems ME, select Intel ® ME Configuration -->select "Y", Intel ® ME Power Control --> Intel ® ME ON in Host Sleep States --> Select an option which allows for AMT Wake on LAN. I have seen OEM vendors give three different names for AMT Wake on LAN. You may find WOL_EN Pin, ME WoL or ME Wake. Note: Even if your AMT system responds to OOB Console commands, it still will not Wake Up with a SCCM Package distribution unless enabled within the Management Engine.





Install the Virtual Application client on the vPro System to process a Virtual Application Package. Now you're ready to successfully Wake and Update AMT systems using SCCM with Integrated Application Virtualization technology.



-Ryan Ettl


Many times, especially lately, we have seen situations where the wrong VeriSign certificate was purchased for AMT provisioning.  It is very frustrating at times why things are not working as quickly..... and then come to find out that the root cause is the certificate you orderd.  Anyway, here is a step-by-step (with pictures) of how to order the correct Secure SSL certificate from VeriSign.



Request & Install Verisign Certificate for any ISV

At ManageFusion Orlando and in The Hague, we did a hands-on lab which combined Intel vPro System Defense capabilities, customized network filter from Altiris, and Altiris Software Delivery to securely update a client(summary available at


One of the attendees pointed out the following real-world challenge: They are migrating from one security solution to another.  This will temporarily expose their client systems to attacks.  With the capability to do secure updates – as noted in the lab – they are much better positioned to do to the migration for vPro\AMT enabled systems.


If you’re unsure what 5 minutes “in the open” can do to unsecure client – read the following news article entitled “Malicious ‘botnets’ turn PCs into ‘zombie’ slaves” -


Another attendee provided more reference to how they could use this.  A classic "chicken/egg" problem - if a client is out of compliance or infected, it must be patched.  The patch solution is on the production network, yet corporate policy states systems out of compliance are placed on an isolated or remediated network.  So - how do you patch a client to which the production software delivery server cannot connect?  Sneaker-net shouldn't be the answer... especially when the target client system is far outside the building you're in.


The key to remember about this use case - the System Defense filters must allow communications on the software delivery network ports.  The Altiris Juice article above provides references on this is done in a Symantec\Altiris environment

A couple new known issues and workarounds this week - check'em out!




On October 9th, 2008, a group of Intel Pro’s across the company got together to host a chat session. It was absolutely stellar, with great questions in all different areas of the client.  Here is that transcript and I want to apologize for delay in posting this.  Our goal was to post in 24 hrs, however we realized that it was not as possible as we liked it to be.   


  Chat Transcript - October 9th, 2008 - output from the chat session


ENJOY & stay tuned for a future chat.


Josh H

An updated version (release 1.1 - build 552) of the Intel WS-MAN Translator has just been released. Updated features include:


  • Provides support for running on 64-bit systems

  • Provides additional translation services for legacy systems such as wireless profiles, and 802.1x.

  • You can upgrade from existing builds by using this VB Script or it can be installed on its own.


To download the latest version, please visit:









Upgrading from Intel WS-MAN Translator 1.0 to Intel WS-MAN Translator 1.1 (Build 552)



To upgrade a previous version of the Intel WS-Man Translator to a newer version, download the Update Translator VBScript and run it in the same folder that the latest Translator MSI is located. This will upgrade your WS-MAN Translator version and keep your previous configuration setting.




Fresh install of the Intel WS-MAN Translator




Generate a Certificate Request on SCCM Server for Intel WS-MAN Translator


  1. On the SCCM Server, go to Start > All Programs > Administrative Tools > Internet Information Services (IIS)

  2. Expand Web Sites and Right Click on Default Web Site and select Properties

  3. In the Default Web Site Properties windows Select the Directory Security Tab. In the Secure Communications section, click the Server Certificate button

  4. This will launch the Web Server Certificate Wizard. Click Next

  5. In the IIS Certificate Wizard Window, select Create a new certificate . Click Next

  6. Select Send the request immediately to an online certification authority. Click Next

  7. Enter a Name for the certificate: WS-MAN Translator Server Certificate. Click Next

  8. Enter Organization Information (Organization and Organizational Unit) and Click Next

  9. Enter the Common name: This is the FQDN of your server you are installing the Intel WS-MAN Translator on and should be the same as the FQDN of your SCCM Server. Click Next

  10. Enter in your Geographical Information. Click Next

  11. Enter 443 for the SSL Port for this web site. Click Next

  12. In the Choose a Certification Authority Window, select your issuing Certificate Authority. Click Next

  13. Confirm your request and click Next

  14. Once Wizard is complete, click Finished


Set Delegation for the SCCM Server


  1. On your Domain Infrastructure Image, Click Start > All Programs > Administrator Tools > Active Directory Users and Computers > > Computers. Right Click on SCCM Server and select Properties.

  2. Check the box Trust Computer for Delegation and click OK
         Note: If you do not allow this, you will need to setup the WS-MAN Translator (during configuration steps) run time account with a user that has permission to the AMT client. At that point the credentials configured in the run time account are used to manage the client for Kerberos authentication.


Installing the Intel WS-MAN Translator


  1. On the SCCM Server, run the Intel WS-MAN Translator Setup

  2. In the Intel WS-Management Translator setup window, click Next

  3. In the Intel WS-Management Translator setup window, click Next

  4. During the installation, keep all of the Default settings until installation wizard is complete and install has finished.


Configuring the Intel WS-MAN Translator


  1. Click Start > All Programs > Intel WS-Management Translator > wtranscfg.exe to configure the Translator

  2. In the WS-Translator Configuration Wizard Window, Set common setup accounts, Set TLS/forwarding options, & Set WinRM Options. Click Next

  3. In the Set initial setup password window, enter the password you configured within SCCM Out of Band Management Properties > Provisioning setting Section > MEBx Account. Click Next

  4. In the Set Common Pre-Shared Key window, should select a more random and secure PID and PPS for security reasons. Click Next.

  5. In the Import Common Setup Certificate, Click Browse and select the Same Certificate you used in SCCM Out of Band Management Properties > Certificates Section > Provisioning Certificate. Click Next.

  6. In the Select TLS/forwarding options windows, select (default Options): Listening Port: 443 & Forwarding Port: 16993. For the Server Certificate: select the WS-Man Translator certificate created in previous step.

  7. Select Allow Basic Authoziation and Click Finished. Click OK to Restart the Translator Service.


Configuring SCCM SP1 to use the Intel WS-MAN Translator


  1. Within System Center Configuration Manager Out of Band Management Properties > Provisioning setting Section > AMT Settings. Check the option for Enable support for Intel WS-MAN Translator. Once selected, click Apply.


--Matt Royer

Intel vPro Radio Returns with McCreary & Montevina!


Listen in for the scoop of the latest vPro platforms of 2008 (McCreary & Montevina). Find out what's new, what's better, and where you can get your hands on these systems. Featuring your hosts as well as Steve Grobman, Christie Rice, and Clyde Hedrick.



You can simply click play on the music player below, Stream this Show Online, or feel free to visit Open Port Radio



Also, check out this information:

Where to Buy Intel(R) vPro(TM) Technology


Order an Intel® vPro™ Technology "Activation-Ready" PC or WS

Acer | Dell| FSC | HP | Lenovo | LG | Panasonic | Samsung

Brush off your calculator, this number is certainly going to make you cringe..  “  1984 Tons of CO2 a year.  “

If you leave your PC on AT night it will cost you money & contribute to your carbon footprint (NOT GOOD)!.


I’ve talked about power management for some time now & I’ve focused on the importance of power management, however what I have not talked about is the $$’s, #’s and the hard data.  Let me use this opportunity to do so.  After spending the last few months learning even more about power I would like to go after a few power data points (Power Points  ) that I think are going to make you cringe.


First let’s look at how electricity is made worldwide  - here’s a graph from -  showing worldwide electricity generation by fuel 2005-2030.  Coal is of course the #1 source worldwide for electricity generation.




Now let’s peak into the US. On @





In the US – 48.9% of electricity is created by coal.  At this point your probably wondering where I’m headed on this blog and what is my point..  well. If we know that coal worldwide is #1 and in the US it has 48.9% of generation source, then when we talk about not using electricity it should be a good thing ($$’s, eco friendly, etc..)  So let’s model it out.  !



First we need to lay out a few assumptions around what is a Managed PC & NON Managed PC.

• Here in this EPA presentation it discusses power cost comparison for both.  

• For this blog we are discussing a “Managed PC” and we are utilizing the energy star calculator located @

• Assuming a install base of 1000 well managed PC’s


What is the Output?

1000 well managed PC’s =

1,232,676, kWh of savings (CFO’s cringe)

1984 Tons of CO2 (Eco folks cringe here)


Now let’s make this specific by region on the US, if you utilize the following power rate’s - and since I’m headed to Florida I’ll utilize the current rate between $110-114/1000kwh, this equals $140k (Finance analyst take note –


is the response I’m looking for.  )



Now for certain regions of US the story ends here, however for power districts where coal is the source of electricity generation we move on to CO2.  Taking an average passenger car which produces 5.2 Ton’s of CO2 per year (quoted from EPA Site    If you take that same 1000 PC’s that equals 1984 tons of CO2 a year, make them vPro, manage them, you can potentially put the

equivalent of 400 cars off the road per year.

  Sounds great right.. of course, now if you look at the 3 following case studies you will see more specific to Health & Education .


#1. Cleveland Clinic -

This article describes how Cleveland Clinic will achieve positive ROI of $442,000 in net power savings over 4 years and will also save 29,000 IT support man-hours in the same time period.


#2. University of Plymouth -

Recently, the University of Plymouth completed a refresh of their 4,800 desktop PCs, upgrading the systems to PCs with Intel® Core™2 processors with vPro™ technology in order to offer students the latest in IT services. The university was particularly interested in Intel® vPro™ technology because of the potential to allow intelligent power management, which could reduce power consumption and reduce the university’s carbon footprint.


#3.  IOT -

The State of Indiana’s newly consolidated Indiana Office of Technology (IOT) conducted a manageability assessment of PCs with Intel® Core™2 processor with vPro™ technology1. Their decision to convert 20,000 desktop systems to PCs with Intel® vPro™ technology within four years was based on reduced operational expenses2. The challenge was the consolidation of several IT service groups serving different agencies into a centralized service delivery organization while improving customer service and decreasing support costs



  vPro Managed PC = Lower costs for POWER = Reduce Carbon Footprint



Let’s take this to action now:  2 part story here, 1) what are the management consoles doing  2) what can you do with power software in the mix.


Scale out w/ the following power jobs:

*Altiris -





What are the leading software vendors saying?

JamieK’s blog on vPro Expert Center -

 Verdiem web site

A typical PC consumes nearly 600 kWh of electricity annually. SURVEYOR can help reduce that energy consumption by an average of 200 kilowatt-hours (kWh) per PC annually. In a PC-intensive organization, this typically represents a 3-6% annual reduction in total electricity consumption, saving an average of $20-$60 per PC annually. Additionally, by eliminating PC network energy waste, organizations also reduce associated CO2 greenhouse gas emissions.

 1E doc on the climate savers site:

Power management software can reduce a PC’s power consumption by 80 percent, allowing com¬panies to save between $25 - $75 per desktop PC.28 Beyond automated “shut down,” power savings are derived during the day by automating monitor shut-down after a period of inactivity.

At 8.68 cents per kWh, a typical PC left on overnight wastes $55.13 a year. That’s more than $165,000 for a 10,000-PC enterprise that leaves 60 percent of its machines on, and $1.72 billion for the 60 percent of work computers that may be running across the country each night unnecessarily.



So… why did I say “Don’t share this BLOG with your finance Analyst or your ECO team, they will not be happy! .. “  Well if you’re the last to know about vPro and you have it in your IT shop, that could be a fun conversation to have with your CIO & CFO.    So.      “don’t be the last to know about vPro”..



Saving energy part III  -

Saving Energy part II -

Saving Energy Part I -

Eco Friendly PC -

Announcement of EcoFriendly PC -

We just published a new ROI study, which shows how a company is saving energy and money, while increasing efficiency.


Projected cumulative savings for the company of over $190,000 over 5 years. CSK’s customer is using the remote power-up capability to make sure all PCs are ready to receive patches. The service company is also saving on energy consumption by using Intel vPro technology to power up systems off-hours only when patching is needed, then using their management software to power PCs back down.


ROI Analysis: Positive ROI of 100% with Reduced Carbon Emissions and Better Patching Using PCs with Intel® vPro™ Technology

One of the things we advocate when mentoring new I.T. start ups is to take "Baby Steps" in their business building processes.


One of the critical areas that the new I.T. shop needs to build up is the lab.



A simple lab setup that has a relatively low cost, but provides excellent value is the following:


  • Intel DQ35JO

  • Intel Q6600 or Q6450 Core 2 Quad

  • 8GB Kingston non-ECC RAM

  • 2x 500GB Seagate Barracuda in RAID 1

  • Antec Sonata or Minuet.

  • Intel PRO/1000 PF Dual Port Server Adapter


This is our base configuration. Quad Core gives us the necessary power to run a number of virtual machines with 8GB giving us the space to run at least one or two server OSs and perhaps one or two desktop OSs at the same time.


The host OS to begin with is Windows Vista Business x64 with Virtual PC providing for the virtualization needs. Down the road either Server Core with the Hyper-V role installed or the new Microsoft Hyper-V Server 2008 can provide the host foundation.



RAID 1 via the on board controller is a first step. The second, once the consultancy has grown some, is to install a second pair of 500GB Barracudas to open up the I/O bottleneck a bit with RAID 0+1.



Licensing would be covered by the Microsoft Action Pack Subscription to begin with. TechNet Plus would provide the lab licensing further on.



Why vPro? Because, a business is very conscious of every dollar being spent during the startup and early phases of its existance. Active Management Technology provides a simple but effective way to faciltiate reduced expenses.



While the DQ35JO may cost a bit more than say a Classic series board out of the box, those extra dollars are returned very quickly in two ways:


  1. Power savings by having the lab system or systems off while not in use.

  2. The consultant can fire up that lab system when they are not in their office.

The built-in hardware support for virtualization is also a key feature.


Microsoft Windows Small Business Server 2003 or 2008 provides an SSL secured remote access method to the internal network via the Remote Web Workplace.



The methodology is quite simple:


  1. Log on to RWW as a domain admin.

  2. Log onto the server via "Connect to my Server" link.

  3. Use the Intel System Defense Utility to connect to the lab system and power it up.

  4. Log off SBS and RWW.

  5. Log onto RWW as the lab user

  6. Connect to the lab system via the "Connect to my computer" link.

Once logged onto the lab system's desktop the consultant is good to go with whatever tasks they are looking to test on the lab setup.


Prior to vPro and AMT, we were leaving our lab systems online all of the time. We had to, as there was no guarantee that the lab would be needed while on-site working on a critical issue. And, if a problem arose where the lab system had locked up, there was no way to power cycle the system.



For us, vPro and AMT just make cents!

Check out the updated Configuration Guide for Intel vPro Technology with Microsoft ConfigMgr SP2! It was updated for Microsoft ConfigMgr SP2 release.


Take a peek!


Intel vPro Technology Out of Band Management Quick Start Install Guide for ConfigMgr SP2

Using LANDesk 8.8 for your vPro deployment? This quick start guide was updated to add new details and increase usability.


Quick Start Guide for LANDesk* and Intel® AMT

A Customer Preparation Checklist for Intel(R) vPro(TM) Activation with LANDesk


The following document was created for customer preparation to ensure the success of activating vPro platforms within the customer's corporate production environment.


LANDesk Preparation Checklist for Intel(R) vPro(TM) Activation


Activator packaging

Posted by lharkness Oct 9, 2008

Today I've posted a couple of documents that outline tools we have developed to deploy the activator tool in several Enterprise enviroments. Activator Packaging gives an overview of the tool and the requirements Building Activator Packages is an example of a script and packaging tool used to deliver the Activator Utility and the syntax to initially provision systems and to keep the host name sychronized.

Here's a guide that provides step-by-step instruction for purchasing a VeriSign certificate and then importing it into Internet Explorer for use with LANDesk 8.8.


Installing VeriSign Certificates on LANDesk 8.8

UPDATE (1:00 PM PST): The Chat session is officially over. Please check back here soon for more updates including a log from the chat.


Join Intel experts in our live chat session happening right now!

To join the chat visit the vPro Community Homepage and click on the chat banner.



this weekend I received a link that had a pretty good Q&A from Microsoft about OOB (out of band management).  I found it a good resource to answering typical questions that are brought up during a Pilot of the technology.


Enjoy the Q&A.    Thank you Sergio for forwarding it..

A while back, I was talking with Dave McCray, a buddy in Intel's IT group, about a training room that he'd just finished equipping with Intel® vProTM Technology-based PCs.  As the vPro PR guy, I'm always looking for stories that might interest the media and thought Dave's hands-on experience might yield some angles.  Dave has been working with vPro since its early days, and as we chatted about the installation, it became apparent that he'd developed an extensive toolbox of BKMs (Intelese for "best known method methods") that make it quicker and easier to fire up vPro.  We came up with the idea for a series of how-to videos as a way to share his honed procedures.  To do that, we recruited another friend, Brett Twiggs, a systems engineer with LANDesk, an Avocent company, whose LANDesk* Management Suite incorporates vPro's capabilities in its user-friendly approach.  The result is a four-part series of chats and hands-on demos that make the implementation and use of vPro that much easier, plus some sage advice gleaned from Brett's and Dave's experience.  They start with some Shop Talk, and then discuss Green IT, Enhancing Security, and finally Remote Diagnostics and Repair.  Hope these are helpful.  And if you have some tips, let us know.

Jump start your software development for the Third Generation of Intel® CoreTM2 processor with vProTM technology. Get an overview of the Intel Active Management Technology (Intel AMT) and all new features in the Intel AMT 4.0/5.0. Register for this free event and take advantageof this great leaning & networking opportunity. The Bootcamp is mainly designed for the ISVs and software developers who are interested to enable/develop their own manageability/security applications for Intel vPro Technology.


This developer Bootcamp will be hosted using the Unisfair virtual conferencing capabilities. We will have plenty of options for you to network with fellow Independent Software Vendors, Intel technology experts, and manageability developers. The event will be live on Oct 15th (8AM-3PM PST). The focus of the presentations will be to talk about all the new and exciting features of the latest release, but there will be plenty of basic information to get you started on vPro and Intel AMT.


We are also going to have many ISVs demostrating their applications that support Intel vPro technology. Let me know if you any ideas to make this event more meaningful to you. Any and all suggestions are most welcome. Feel free to pass the informaiton about the Bootcamp along.


Looking forward to seeing you at the event.

We have all heard of PEBKAC (Problem Exists Between the Keyboard and Chair) and we've heard the stories, seen the video's.



So..  Wendy (vPro Comms) and I were talking today about wanting to hear your favorite PEBKAC stories within the vPro community, please take a moment and share your favorite one out.


Looking forward to getting a good laugh..  LOL..

In this video Mike Ferron-Jones & Edwin C. Yuen discuss the following:


#1.  Manage the applications with Microsoft Application Virtualization

#2.  Manage the clients with Intel vPro Technology

#3.  Manage the Enterprise with Microsoft System Center




Customer Preparation Checklist for vPro Activation with the Microsoft SMS 2003* Add-on

Microsoft SMS Preparation Checklist for vPro Activation</center>


Don't miss this new resource in the Activation zone! It has a checklist for customer infrastructure preparation for implementing systems with Intel(R) vPro(TM) technology within the customer's corporate production environment.


This page was created to address frequently asked questions (FAQ) related to security of provisioning and configuration of vPro™ machines as well as value added security features introduced with vPro™ technology.



The identification and activation of vPro systems that are not remote configuration capable and that have not completed the provisioning/activation process prior to being placed in the field can be a daunting task in a large enterprise environment. Especially in the common situation where vPro systems have been deployed before backend infrastructure is in place.


To help address this, we created a small utility that leverages MEInfo to capture MEBx details related to activation, and store this data in the Windows registry. This allows for automated inventory methods to collect and report the information enterprise wide, allowing detailed planning of remote activation strategy.


The utility requires the same set of prerequistes as MEInfo to produce full detail, such as the HECI drivers to be in place, and Administrator priviledges on the local machine, but is small, silent, and Software Deployment friendly.


All of the data that iAMT Scan generates is stored in the local system registry:



Consisting of the Following String Value Entries:




AMTSetupStatus - Provisioning State of the Management Engine

AMTVersion - AMT Version

BIOSVersion - System Bios Version

Date - Date the scan was performed

DHCPServer - IP Address of the DHCP Server that lease was obtained from

DNSServerOrder - DNS Search Order

FQDN - Fully Qualified name of the host based on NT/AD Domain

DNS_FQDN - Fully Qualified DNS Name for the Host Adapter

Gateway - Gateway (router) IP Address

HECIVersion - HECI Driver Version

MAC - AMT Capable HOST MAC Address

IPAddress - Current IP Address of Host at time of scan

LMSVersion - LMS Driver Version

Make - Manufacturer

Model - Manufacturer's Model

SerialNumber - Machine's Serial Number

SMSSiteCode - SMS Site the local machine is managed by (if available)

SubnetMask - Current IP Subnet Mask

SystemName - Host machine name

UNSVersion - UNS Driver Version

UUID - The Systems UUID

ProvisionServerPing - Ping status for ‘provisionserver' DNS entry




iAMT Scan v.0.3.0 Use Guide:


iAMT Scan v.0.3.0 Executable:




For those that are not aware, our friends at Microsoft maintain a great blog on System Center Configuration Manager. The blog is used by the SMS Writing team to keep you informed about the content they are writing, the availability of new documents, updates to documents, and other news. The blog is also intended to collect feedback from you, their customers, about existing content and what you'd like to see in the future.






If you haven't already subscribed to the feed, I would highly recommend it.






This week they have a great article on "[Quiz Questions for Out of Band Management (AMT)|]"; take a couple minutes and check it out.






--Matt Royer

The answer might surprise you...



Have you ever wondered why an the Altiris Real-Time Console responds slowly?  This is especially evident when doing training or demonstrations - you double click on a provisioned systems resource, which opens the real-time console.  When selecting on the real-time tab - the clock pops up and spins for a little bit... and finally you are able to access the page.


Well - some tuning might help that situation.  Take a look at


In case you didn't click on the link - the short answer is that the Altiris console is attempting 4 connections - ASF, AMT, WMI, and SNMP.  If all you need is AMT, or perhaps AMT and WMI - save a few threads and time by disabling the unneeded authentications.  This is more than just leaving the entries blank in the configuration profile - it also involves registry changes.  There are other excellent suggestions\inputs on the page.  Click on the link above!

Check out the Known Issues, Best Practices, and Workarounds wiki page - it has brand new info for Santa Rosa/Weybridge USB Provisioning Results.


Known Issues, Best Practices, And Workarounds




USB Key Provisioning: Santa Rosa

USB Key Provisioning: Weybridge

Filter Blog

By date: By tag: