Discovery of AMT capabilities
ACUConfig.exe SystemDiscovery c:\discovery_file_name.xml /NoRegistry
Notes: This example will have the configurator discover the AMT capabilities on your client and record its findings in the file name you supply. It will not record any information in the registry
ACUConfig.exe SystemDiscovery /NoFile
Notes: This example will tell the Configurator to not create an XML file but instead place the discovery data into the Windows* registry of the vPro client that the configurator is running on. The data will be stored in the following locations in the Windows* registry.
- 32-bit and 64-bit operating systems: HKLM\SOFTWARE\Intel\Setup and Configuration Software\SystemDiscovery
- In addition, on 64-bit operating systems: HKLM\SOFTWARE\Wow6432Node\Intel\Setup and Configuration Software\SystemDiscovery
Host based configuration/unified configuration
ACUConfig.exe ConfigureAMT profile.xml /DecryptionPassword password
Notes: This example will try and use host-based configuration to setup and configure AMT if it is supported by your vPro client. If it is not, it will rely on information in the XML profile to use a RCS (Remote Configuration Service) server in your environment. The arguments you supply are the file name of your XML profile (created with the SCS console or Configuration Wizard) and the password used to decrypt the XML profile.
Configuration via the Remote Configuration Service (RCS)
ACUConfig.exe ConfigViaRCSOnly rcs_server_fqdn.company.com “profile name”
Notes: this example tells the Configurator to use the Remote Configuration Service to configure your clients. This command will force remote configuration to happen, even if your vPro client supports host-based configuration. The arguments you supply are the FQDN of the server running your RCS service and the name you gave your profile that is stored on the RCS server.
Maintenance for TLS certificates and Active Directory objects
One of the key areas that can be overlooked with vPro clients is ongoing maintenance. It is even more important if you use TLS certificates to encrypt management traffic or use Active Directory integration to handle authentication. Both of these abilities require regular maintenance activities. If this maintenance is not run, you may block access to the AMT capabilities on your vPro clients.
ACUConfig.exe MaintainAMT profile.xml AutoMaintain /DecryptionPassword password
Notes: This command line above should be used for clients configured via host-based configuration. The AutoMaintain task will go through and evaluate what maintenance tasks need to be performed and automatically perform them. It will use the account information supplied in the XML profile to request a new TLS cert and perform maintenance on the AMT AD authentication object is present.
ACUConfig.exe MaintainViaRCSOnly rcs_server_fqdn.company.com “profile name” AutoMaintain
Notes: You would use the command line above for clients configured by the RCS; it will not work with clients configured via host-based configuration.
This example will tell the configurator to use the RCS to perform the maintenance of the client, using the supplied RCS FQDN to contact the RCS server. The profile name is supplied to let the configurator know what maintenance tasks it should perform, such as TLS certificate maintenance and/or Active Directory object maintenance. The AutoMaintain function will tell the configurator to automatically evaluate and perform any necessary maintenance tasks.
Un-configuration of AMT
ACUConfig.exe UnConfigure /ADOU DC=com,DC=vprodemo,OU=AMT_OU /Full
Notes: This command line should be used with vPro clients configured via host-based configuration that use Active Directory integration for authentication. It will perform a full un-configuration of the AMT client. The /ADOU switch specifies the OU that contains the AMT objects used for authentication and tells the configurator to delete the object for the vPro client contained in that OU.
This example also assumes that the account running the Configurator has the proper privileges to delete an object from the specified OU. If it does not, you can add the /DomainUser and /DomainUserPassword switches to specify credentials that have the appropriate access to the OU containing AMT authentication objects.
ACUConfig.exe UnConfigure /RCSAddress rcs_server_fqdn.company.com /Full
Notes: This command line should be used with vPro clients configured via remote configuration using the RCS. This example has you enter the RCS server address and specifies to perform a full un-configuration of AMT.