Hopefully by now you’ve heard about Host Based Configuration. If not, Host Based Configuration allows you configure Intel® Active Management Technology by running a configuration application on that system. Previous versions of Intel AMT required that you remotely configure the system or configure it via a BIOS-like configuration screen. With Intel AMT 7.0 you have a new option!

 

Because Host Based Configuration has less security related requirements, there are now two control modes that Intel AMT operates in depending on how it’s configured.

 

If you use one of the previous configuration methods your system will be in Admin Control Mode. If you use the new Host Based Configuration method, then your system will be in Client Control Mode. In Client Control Mode there are a couple security related limitations such as:

 

  • System Defense is disabled
  • User Consent is required for all redirection operations and changes to the boot process

 

If you’ve used Intel Remote KVM you should be familiar with the User Consent screens. If not the User Consent screen is a video overlay that presents a six digit PIN that must be relayed to the management console is order to complete certain operations (This is done to ensure that the end user grants permission before certain actions can be completed).

 

Now, on to provisioning. Included in the Intel Setup and Configuration Service is a program called ACUWizard (ACU == AMT Configuration Utility). This utility will allow you to configure AMT settings on the local machine with just a few clicks.

 

If you want you can also save off your configuration to an XML file and use those settings to configure other machines in your network. You can package up an installer and push it to your machine as you would a normal system update.

 

Here is a link to a video with a quick demo (around 3:30 through):

 

 

Thanks!

 

--Richard