background image

Intel® vPro™ and Intel® Centrino® Pro Processor Technology Quick Start Guide 

12 

 

Step 4B:  OEM Pre-configuration – Factory State to Configured State 

Most OEMs are willing to provide the service of changing the Intel vPro client from factory state to setup 
state by entering the password and client authentication information into the Intel MEBX on each client 
system for you.  This often requires an additional fee to the OEM.  This method is most useful when an 
Intel vPro client machines are to be delivered directly to the end user from the manufacturer. 

The authentication information (security keys) can be provided to the OEM for loading into the client 
system’s BIOS (via the Intel MEBX), or the OEM could provide you with a list of keys they generated.  
The keys must match between the Intel vPro machines and the management console.  The 
management consoles have an option to import and export keys to facilitate this transaction. 

If you ordered your Intel vPro client systems pre-configured with Intel MEBX password and client 
authentication information already loaded by the OEM, then they are already in a Setup state.  When 
you connect the client systems to the network and power them on they will automatically authenticate 
themselves with the provisioning server and provisioning will occur (assuming you performed Steps 1-3 
above).  Then they will be in a Configured state, ready to be discovered and managed by the 
management console. 
 

Skip to Step 5:  Discover Intel vPro Clients through the Management Console, on page 15. 

 

 

Step 4C:  One-Touch Configuration of Intel vPro Client - Factory State to Setup State 

The Intel vPro clients need authentication information configured on them so that they can authenticate 
themselves to the provisioning server; otherwise the server won’t provision them.  This authentication 
information is made up of a Provisioning ID (PID) and a Provisioning Pass-phrase (PPS).  Together they 
are referred to as a PID-PPS pair.  The server maintains a list of valid PID-PPS pairs, which is matched 
against any incoming PID-PPS pair from a client requesting provisioning.  If the client’s PID-PPS 
matches one of the entries in the server’s list, that client is provisioned. 

Step 4C-1:  Confirm Latest BIOS Version:  It is important that you use the latest BIOS and firmware 
version from the Original Equipment Manufacturer (OEM).  Please visit their website to determine the 
latest versions.  If an update is needed, follow the instructions provided by the OEM to implement the 
update. 

Examples of OEM BIOS updates 

 

HP:  

 

Lenovo:  

  

 

Dell:  

 

Summary of Contents for Centrino2 vPro

Page 1: ...o Technology Intel Core 2 Processor with vPro Technology Intel vPro and Intel Centrino Pro Processor Technology Quick Start Guide Based on Intel Active Management Technology and HP Out of Band Manager...

Page 2: ...etup and Configuration Flow 6 Step 1 Configure Existing IT Infrastructure 7 Step 2 Verify Intel vPro Client Windows Drivers 8 Step 3 Install Intel SCS and HP OOBM Management Console 9 Step 4 Configure...

Page 3: ...anual Intended Audience This Quick Start Guide is intended for Information Technology IT professionals system integrators and other technical specialists with experience deploying computer systems and...

Page 4: ...t Console Installation specifies system requirements and tells you how to install configure and start the OOB Management Console Configure your management console to manage Intel vPro clients Discover...

Page 5: ...ntel vPro Using Enterprise Standard Mode Provisioning Process Flowchart The following picture shows the overall process flow for provisioning Intel vPro client systems in Enterprise Standard and Advan...

Page 6: ...ovisioning Provisioning Factory State An Intel vPro machine comes from the OEM in Factory State In this state Intel AMT is un configured and not available for use by management applications When an op...

Page 7: ...server with its network address information The DHCP server must support Option 81 to register network address information into the DNS server on behalf of the Intel ME Option 15 should also be enabl...

Page 8: ...with Microsoft Windows operating systems including Windows 2000 Windows XP and Windows Vista are required on the Intel vPro client platform Obtain these drivers from your client system manufacturer s...

Page 9: ...fter the SCS and OOBMC are installed a vPro profile needs to be created A profile allows configuration of multiple Intel AMT platforms with certain configuration properties A profile defines the secur...

Page 10: ...do one of the following instruct your Intel vPro client manufacturer OEM to place a matching certificate hash on each Intel vPro client during manufacture manually enter the matching certificate hash...

Page 11: ...ties intel com docs DOC 1916 Once the pending certificate request has been completed with the CER file provided the target website used for this process has been assigned the issued certificate In add...

Page 12: ...in a Configured state ready to be discovered and managed by the management console Skip to Step 5 Discover Intel vPro Clients through the Management Console on page 15 Step 4C One Touch Configuration...

Page 13: ...erated Each record consists of an 8 byte PID a 32 byte PPS and the administrator s password Step 4C 3 Configure Intel vPro Clients Using a USB Thumb Drive In this method the new password and the PID P...

Page 14: ...ired includes Change Intel MEBX password change from factory default The default password is admin The new ME password must meet strong password criteria which include Be between 8 and 32 characters l...

Page 15: ...o systems a If the Intel vPro system is provisioned with the remote configuration method described in the 4A the system status will transition from unprovisioned to provision state automatically using...

Page 16: ...ll of the provisioned OOB devices on your network Remote Boot Manager Power On Off o Remote Boot Manager using Console Redirection Serial over LAN SOL and IDE Redirection For further information on te...

Page 17: ...ou will want to update the process to re image a PC that has blue screened at a remote site using the new Intel AMT features now available in your management console Using Agent Presence AP Agent Pres...

Page 18: ...the Kill All NICs policy when SD is triggered Once the machine is remediated the Kill All NICs policy is removed and the previous policy is re applied The administrator must manually perform the actu...

Page 19: ...he console log The messages actually displayed will be based on the filter selection on the Log page There is a table lists the possible messages causes and a suggested action to remedy the situation...

Page 20: ...Pro Processor Technology Intel processor technology that provides a higher level of security and management to desktop computers ISV Independent Software Vendor LMS Local Management Service driver Pro...

Page 21: ...Intel vPro and Intel Centrino Pro Processor Technology Quick Start Guide...

Page 22: ...IN CONNECTION WITH INTEL PRODUCTS NO LICENSE EXPRESS OR IMPLIED BY ESTOPPEL OR OTHERWISE TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT EXCEPT AS PROVIDED IN INTEL S TERMS AND CONDIT...

Reviews: