Intel Active Management Technology (AMT)

Intel Active Management Technology (AMT)

Some Lenovo laptop include some of Intel's Management features.

Version	Models
AMT 2.5	T61, T61p, X61 Tablet

Features

• Management over the Network (LAN and WLAN, using AMT 2.5)
• Remote Asset (Hardware and Software) Inventory
• Remote Diagnostic and repair (even if laptop is off or down)
• Agent Presence Checking (isolate corrupted laptops)
• Encrypted software update (w/ remote power-on).
• System isolation and recovery (Use hardware to filter inbound and outbound traffic, except management traffic)
• Dedicated Flash memory (Firmware + Inventory + ISV Data)

Hints how to setup it via Intel ME BIOS Extension (MEBx) based on the T61p (Small business Mode)

Pre-configuration

• Use ThinkVantage System Update so you have the latest BIOS

Enabling AMT in BIOS

• You should enable AMT in BIOS
• Hit the ThinkVantage button during the POST screen, then after the menu appears hit 'F1'
  • Select 'Config' on the main screen
    • Select 'Intel(R) AMT'
      • Set 'Intel(R) AMT Control' to 'Enabled'
      • Hit 'F10' to Save and Exit

Enabling AMT in Intel Management Engine BIOS Extension

• After the POST screen you will see the Intel ME BIOS Extension screen. Hit Ctrl+P to enter the setup.
  • The default password is 'admin' (without quotes)
  • If you try to change the Intel ME password and get "Error - Intel(R) ME password change rejected" message, then you are using a weak password. This are guidelines for the Intel ME strong password:
    • between 8- and 32-characters long
    • Contain both upper and lower case Latin characters
    • Have at least one numeric character
    • Have at least one ASCII non-alphanumeric character (!, @, #, $, %, ^, &, *)
  • Select Intel(R) ME Configuration
    • Select 'Intel(R) ME State Control'
      • Set it ENABLED
      • Select Return to Previous Menu
    • Select 'Intel(R) ME Firmware Local Update Qualifier'
      • Set it to ALWAYS OPEN
      • Select Return to Previous Menu
    • Select 'Intel(R) ME Features Control'
      • Select 'Manageability Feature Selection'
        • Choose 'Intel(R) AMT'
      • Return to previous menu
    • Select 'Intel(R) ME Power Control'
      • Select 'Intel (R) ME ON in Host Sleep States'
        • Set the 'widest' range of Sleep States
        • Hit 'ESC' to Exit. The system will reboot now.

Configuring AMT via Intel ME

• Hit Ctrl+P when the Intel ME BIOS messages apear
• Select 'Intel(R) AMT Configuration'
  • Select 'Host Name' and enter the same name as for the OS Host name
  • Select 'TCP/IP'
    • Hit 'N' to enable the Network Interface
    • Hit 'N' to enable DHCP
    • provide your domain name as set (or to be set) in the OS
  • Select 'Provision Model'
    • Hit 'N' to not change to AMT 1.0 Mode
    • Hit 'Y; to change to Small Business
  • Select 'SOL/IDE-R'
    • Hit 'Y' to confirm the warning
    • Set Username & Password to ENABLED (if it's set to ENABLED don't hit just 'ENTER' because you disable it)
    • Set Serial Over LAN to ENABLED
    • Set IDE Redirection to ENABLED
  • Select 'Secure Firmware Update'
    • Set it to ENABLED
  • Hit 'ESC' to Exit. The system will reboot again.

Configuring the OS

• Use ThinkVantage System Update to get the AMT Software
• After update reboot
• After Log-in you should see the message 'Intel(R) Active Management Technology (Intel(R) AMT) status on this computer is enabled.'

Links

• See Also Centrino Pro
• Intel - AMT [1]
• Intel® Active Management Technology (Intel AMT) Software Development Kit (SDK) Start Here Guide [2]
• Tips & Tricks for Setting up & Accessing an Intel AMT Client [3]