Intel® vPro™ Technology SMB & MSP Provisioning Method Selection Guide

Version 20



    Intel vPro Technology delivers many high-performance features and innovative capabilities for both users and IT administrators - all in an energy-efficient platform that is Microsoft Windows Vista* ready.  Among the innovative capabilities of the Intel vPro technology are Intel Active Management Technology (Intel AMT).

    Intel AMT is a powerful hardware-based technology for security and remote management of computers.  With Intel AMT, IT Professionals and managed service providers (MSPs) can monitor and manage computers anytime - even if a wired computer's power is off, the OS on a wired or wireless computer is inoperable, management agents are missing, or hardware (such as a hard drive) has failed.  When integrated into a third-party management solution, computers with Intel vPro Technology let service providers spend less time managing the computer and more time focusing on strategic business initiatives.

    Intel AMT must be configured with the appropriate security, network, and operational parameters before a third-party management application can access the Intel AMT capabilities.  If you do not configure Intel AMT before trying to integrate into the management application, the integration process will fail.

    To turn on the value of Intel vPro Technology, there are four options for configuring Intel AMT:


    1. Manual Configuration of Intel® vPro™ Technology Systems (Basic Mode)(for a few computers): Entering the BIOS and Management Engine BIOS Extension (MEBx) to configure Intel AMT.  Several documents are available at this link to step through the required setup screens in the BIOS and MEBx.
    2. Improved Manual Configuration of Intel® vPro™ Technology Systems (Basic Mode) (using software utility & USB key): Intel AMT Configuration Utility is a Microsoft Windows* utility included in the Intel Setup and Configuration Service (SCS) 6.0 Lite download available at the link below.  This utility helps create a USB key to locally configure Intel AMT (available only for Intel AMT version 4.0 and above).  The Intel AMT Configuration Utility must be run on each machine; but does not require installing the SCS 6.0 Lite service in the network, or manually accessing the BIOS screens.

    3. Automatic Configuration (using SCS 6.0 Lite service): Intel SCS 6.0 Lite is a provisioning service, designed for small businesses and their service providers, that will automate Intel AMT configuration.  This lightweight service requires minimal infrastructure to accommodate smaller sites.  It requires installing a service on one server or computer in a network.  The service keeps a profile which is used to configure Intel AMT settings for all the computers in the network.  With the service installed, there are two methods for configuring systems:

      1. Automatic Configuration of Intel® vPro™ Technology using SCS 6.0 Lite and PSKs: Pre-Shared Keys (PSKs) are created by the SCS Lite service and loaded onto each client computer.  The pre-shared key establishes a trust between the SCS Lite service and the client computer.  Once trust is established, an activator utility is run on the client computer to request AMT configuration (via the profile).

      2. Automatic Configuration of Intel® vPro™ Technology using SCS 6.0 Lite and PKIs: A Certificate (PKI) can be purchased and installed on the computer hosting the SCS Lite service.  With this certificate installed, the AMT client computers can automatically trust the service and the activator utility can be run on each client to configure AMT (via the profile). The network must have a DHCP server capable of configuring option 15 in order for certificates to work properly.





    ManualImproved ManualAutomatic (PSK)Automatic (PKI)
    Level of Effort

    Labor Intensive

    • Must visit every PC for initial & on-going configuration
    • Must access the BIOS to make changes
    • Error Prone
    • English Ony

    Less Labor Intensive

    • Must visit every PC for initial & on-going configuration
    • Configuration data entered into Windows utility
    • Less Error Prone
    • Localized

    Less Labor Intensive

    • Must visit every PC for initial config, not on-going
    • Reboot only, no data entry
    • Least error prone
    • Localized

    Least Labor Intensive

    • Never requires a visit to the PC
    • Least Error Prone
    • Localized
    • None
    • USB key purchase
    • Download Intel SCS 6.0 Lite Activator Utility
    • USB key purchase
    • Download & install
      Intel SCS 6.0 Lite
    • Security Certificate Purchase
    • DHCP server with option 15
    • Download & install Intel SCS 6.0 Lite