1. Assisting Enterprise iAMT Activation Will.ditto@eds.com Infrastructure Specialist EDS, an HP Company

2. iAMT Scan Overview Remote activation of Intel vPro and Intel Active Management Technology (iAMT) features relies on specific criteria being met on each PC in order to be successful. For example, the system BIOS must be of a particular version, the Host Embedded Controller Interface (HECI ) driver for the given platform must be installed, and the Local Manageability Service (LMS) must be installed before most management agents are able to ‘activate’ the technology using a no touch deployment model. iAMT Scan as it exists today, is a small Visual Basic based script utility which extracts system details using Windows Management Instrumentation (WMI) and one of Intel’s SDK utilities MEINFOWin.exe, then stores this information locally in the Windows registry. The approach provides a means for centrally collecting and reporting iAMT specific information assisting in the enterprise remote activation process by leveraging existing Deployment and Inventory mechanisms within the Systems Management Framework. The information that is gathered can be used in several ways, primarily assessing the environments state of readiness prior to remote activation attempts, providing IT staff an opportunity to proactively plan any remediation activity if needed, thus streamlining the overall activation process. Key Concepts: Automation Reduced Physical Touch Reduced Man Hours

3. Top Use Cases During Activation: Preparing machines for Provisioning Identify and report Fully Qualified Domain Name (FQDN) mismatches – example: Mis-match of OS FQDN versus DHCP FQDN – where the domain suffix does not match (DHCP Option 15) Identify and report BIOS versions Identify and report AMT Firmware versions Identify and report LMS Driver versions Identify and report HECI Driver version Identify and report AMT provisioning status Identify and report Intel Setup Configuration Service(SCS) ‘provisionserver’ DNS alias is reachable Identify and report DHCP Server the PC is using and which Router it is connected to

4. Top Use Cases Automated Updating and Remediation Use dynamic group based on iAMT Scan data to automatically deploy update packages or push the Activator executable determined from variables such as: BIOS versions Make/Model AMT Firmware versions LMS Driver versions HECI Driver versions

5. Top Use Cases Operations – Ongoing Support Run iAMT Scan periodically to identify out of sync items and run Activator “/F” to resolve the out of sync items. Host Name Changes Asset Tag Changes New Machines coming into production

6. Information Collected All of the data that iAMT Scan generates is stored in the local system registry: HKEY_LOCAL_MACHINE\SYSTEM\INTEL\iAMT SCAN DATA AMTSetupStatus - Provisioning State of the Management Engine AMTPresent – Hardware detected possibly no driver AMTVersion – AMT Version AssetTag – Information from the BIOS (Burned in by OEM) BIOSVersion - System Bios Version ChassisType – Indicates Notebook, Laptop, Dektop, etc. DHCPServer - IP Address of the DHCP Server that lease was obtained from DNSServerOrder - DNS Search Order FQDN – Fully Qualified name of the host based on NT/AD Domain DNS_FQDN – Fully Qualified DNS Name for the Host Adapter Gateway – Gateway (router) IP Address HECIVersion - HECI Driver Version MAC – AMT Capable HOST MAC Address IPAddress - Current IP Address of Host at time of scan LMSVersion - LMS Driver Version Make - Manufacturer Model – Manufacturer’s Model SerialNumber - Machine’s Serial Number SMSSiteCode - SMS Site the local machine is assigned to (if available) SMSManagementServer - SMS management server managed by (if available) SubnetMask – Current IP Subnet Mask SystemName – Host machine name UNSVersion - UNS Driver Version UUID – The Systems UUID ProvisionServerPing – Ping status for ‘provisionserver’ DNS entry

7. Measured Success Deployed in several enterprise clients using Altiris LANDesk Microsoft Systems Management Server (SMS) Microsoft System Center Configuration Manager (SCCM)

8. More Information iAMT Scan Use Guide: http://communities.intel.com/docs/DOC-2060http://communities.intel.com/docs/DOC-2060 iAMT Scan Executable: http://communities.intel.com/docs/DOC-2061http://communities.intel.com/docs/DOC-2061