Siemens Simatic IPC647C, Operating Instructions Manual

Page: 206 / 246

Detailed descriptions
16.6 AMT (Active Management Technology)
SIMATIC IPC647C
206
Operating Instructions, 12/2010, A5E02669337-02
16.6.2 Enabling AMT, basic configuration
Procedure
For security reasons, AMT is not enabled on new devices.
To enable AMT, follow these steps:
52.
Connect the AMT PC with the LAN.
53. If necessary, first reset AMT to the default status (see section "Unconfigure").
54. To access the BIOS, press the <F2> key while the device is booting.
55. In the Advanced menu, enable "Intel AMT Support", "Intel AMT Setup Prompt" and "Intel
AMT Password Write".
56. Exit the BIOS with the <F10> key "Save and Exit". The AMT PC restarts.
57. To access the MEBx, press the <Ctrl+P> keyboard shortcut
58. In the login dialog, enter the standard password "admin".
59. Change the default password. The new password must include the following characters:
–
In total at least eight characters
– One upper case letter
– One lower case letter
– One number
– One of the special characters ! @ # $ % ^ & *
Note
The underscore _ and the space characters are valid password characters, however
they do not increase password complexity.
60. Enable "Intel (R) AMT Configuration > Manageability Feature Selection".
61. Enable "Intel (R) ME General Settings > Activate Network Access".
16.6.3 Advanced settings
The BIOS and the MEBx contain the most important basic settings for AMT. Additional tools
are necessary if you want to make more advanced settings. If required, these must be
downloaded from the relevant manufacturer's site. For information on the options and use of
these tools, refer to the relevant documentation of the manufacturer.
●
Manageability Commander and other tools of the Intel DTK (Manageability Developer
Tool Kit): Programs from the Intel DTK that you can download from the Internet at
"http://software.intel.com/en-us/manageability".
● AMT Web interface: For encrypted connections, the URL of the Web interface is "https://
<Fully qualified domain name>:16993" and for unencrypted connections "http://<IP
address>:16992".
● WinRM: A command line program that is part of Windows as of Windows Vista. This tool
can be downloaded for older Windows versions.