PCs built with Intel® vPro™ platform include many features and capabilities, some of which must be “turned on” in the BIOS. A good starting point is to take an inventory to determine if your PCs support Intel® vPro™ platform. After you have the inventory in hand, you will be able to plan how you are going to use each technology and come up with an action plan for activating the technology.
Remote Manageability: setup and configuration is required
Intel® Active Management Technology (Intel® AMT) is the manageability part of Intel vPro platform, and allows IT staff to configure, diagnose, isolate, and repair an infected PC—even if it’s unresponsive. To use Intel AMT, it must first be setup and configured.
Intel Virtualization Technology (Intel VT) and Intel Trusted Execution Technology (Intel TXT): setup and configuration is optional
Intel® Core™ vPro™ processors help better manage applications and virtualization of centralized desktop images (Operating System and/or applications) through utilization of local PC resources and hardware-assisted virtualization technologies. These capabilities are activated and configured from the desktop virtualization application and the System BIOS.
Hardware-assisted Encryption: setup and configuration is not required
Advanced Encryption Standard (AES) is a symmetric-key encryption standard adopted by the U.S. government, and as a result, is used by many ISVs to encrypt important data. Intel® AES New Instructions (Intel® AES-NI) helps accelerate encryption operations. Software that is Intel AES-NI aware will automatically detect if it is enabled in the Intel processor.
How To Find Intel vPro Systems
Listed below are three different methods to help detect Intel vPro platform systems and the Intel AMT firmware versions. You may need to try several methods to identify all the Intel vPro systems. After you have identified a PC as Intel vPro capable using one method you do not need to test it using the other methods.
|Method 1: Walk around and look for the Intel® vPro™ badge|
The simplest approach to finding most of the Intel vPro platform systems is to look for the Intel® vPro™ badge. This method works best when you have a small number of systems and you can easily inspect each one. Make a note of the manufacturer and model for each PC with an Intel® vPro™ badge (it will say "vPro" somewhere on the badge). Note, however, that systems that do not have the Intel vPro badge might still be Intel vPro platform capable systems.
To get the Intel AMT version number: reboot the PC and enter your System BIOS. The Intel AMT firmware version will be displayed in the BIOS in some systems. If you don't see it in the System BIOS, try one of the following methods: look in the Intel Management and Security Status icon described in method 2; or use the Intel SCS System Discovery tool described in method 3.
|Method 2: Check for the Intel MEBx or Intel AMT drivers|
Some PCs might not have the Intel® vPro™ badge (for example, some "white box" PCs). The simplest way to find Intel® vPro™ platform PCs in a small office with a few PCs is to check each system for any one of the following software or firmware components:
|Method 3: Use Intel® SCS System Discovery tool|
The Intel SCS System Discovery tool collects information about the Intel ME (the Intel Management Engine runs the Intel AMT firmware and other firmware) and puts that information in the Windows* registry. It is run on each client. Users can then use standard IT tools or management consoles to collect this data from each client. More information and the SCS System Discovery tool can be found here: Intel® Setup and Configuration Software (Intel® SCS).
Intel® vPro Platform
The Intel® vPro™ platform is sophisticated and requires setup and activation. Availability of features and results will depend upon the setup and configuration of your hardware, software and IT environment. To learn more visit: http://www.intel.com/technology/vpro
Intel® Active Management Technology
Requires activation and a system with a corporate network connection, an Intel® AMT-enabled chipset, network hardware and software. For notebooks, Intel AMT may be unavailable or limited over a host OS-based VPN, when connecting wirelessly, on battery power, sleeping, hibernating or powered off. Results dependent upon hardware, setup & configuration. For more information, visit http://www.intel.com/technology/platform-technology/intel-amt
Intel® Trusted Execution Technology
No computer system can provide absolute security under all conditions. Intel® Trusted Execution Technology (Intel® TXT) requires a computer system with Intel® Virtualization Technology, an Intel TXT-enabled processor, chipset, BIOS, Authenticated Code Modules and an Intel TXT-compatible measured launched environment (MLE). Intel TXT also requires the system to contain a TPM v1.s. For more information, visit http://www.intel.com/technology/security
Intel® Virtualization Technology
Intel® Virtualization Technology requires a computer system with an enabled Intel® processor, BIOS, virtual machine monitor (VMM). Functionality, performance or other benefits will vary depending on hardware and software configurations. Software applications may not be compatible with all operating systems. Consult your PC manufacturer. For more information, visit http://www.intel.com/go/virtualization
Intel ® AES-NI requires a computer system with an AES-NI enabled processor, as well as non-Intel software to execute the instructions in the correct sequence. AES-NI is available on Intel® Core™ i5-600 Desktop Processor Series, Intel® Core™ i7-600 Mobile Processor Series, and Intel® Core™ i5-500 Mobile Processor Series. For availability, consult your reseller or system manufacturer. For more information, see http://software.intel.com/en-us/articles/intel-advanced-encryption-standard-instructions-aes-ni/