Intel® Active Management Technology Developers Guide

Download PDF
ID 772055
Date 1/05/2021
Public
Document Table of Contents
Document Table of Contents x
Intel® Active Management Technology Developers Guide
Intel® Active Management Technology Developers Guide x
Getting Started with Intel® Active Management Technology Discovery Configuration Wi-Fi* Connections Remote Power Management KVM Storage Redirection Remote Secure Erase Object Missing User Consent
Getting Started with Intel® Active Management Technology x
Intel® AMT Basic Concepts Intel® Active Management Technology 11 Intel® Active Management Technology 10 Intel® Active Management Technology 9
Discovery x
Integrating Intel® AMT Discovery into a Management Console
Configuration x
Integrating Intel® AMT Configuration into a Management Console Introduction Determining Intel Active Management Technology Feature Support Console Integration Intel® SCS Configuration Tools
Intel® SCS Configuration Tools x
Intel® AMT Configuration Utility
Intel® AMT Configuration Utility x
Profile Creation, file only Profile Creation, USB Key - Single Use Profile Creation, USB Key - Multi Use Host Based Configuration via OS
Profile Creation, file only x
Profile Creation, Delta Profiles
Wi-Fi* Connections x
Wireless Configuration Concepts Wireless Configuration Methods
Remote Power Management x
Integrating Intel® AMT Remote Power Management Solution into a Management Console Remote Power Management of Intel® AMT Devices with InstantGo
KVM x
Integrating KVM feature into a Management Console
Remote Secure Erase x
Implementing Remote Secure Erase Remote Secure Erase FAQ
Intel® Active Management Technology Developers Guide

Integrating Intel® AMT Configuration into a Management Console

Introduction

One of the most important integration tasks for managing Intel® Active Management Technology (Intel® AMT)-enabled devices is configuration. The process of configuration is straightforward using provided tools from Intel such as ACUConfig.exe, which makes configuration easy to script and execute. The more involved part is understanding the requirements of your application and the Intel AMT features you need to enable to reach your goals with your integration project.

Determining Intel Active Management Technology Feature Support

The complexity of configuration profiles varies depending on the enabled features. The first step in integrating Intel AMT into a management console is to determine which features the console should support.

Begin by looking at configuration options within the Intel AMT Configuration Utility, where you can examine the available Intel AMT features. This tool is part of the Intel® Setup and Configuration Software (Intel® SCS) download. See the article on using the ACUWizard and creating a profile.xml file for a quick tutorial on creating a "Basic" Profile. You can find more detailed information about feature enabling within the pdf contained in the Intel SCS download. 

Once you have determined which features you want to enable, all you will need to do is decrypt the file to expose the configuration parameters by using the SCSEncryption.exe program, which is part of the Intel SCS download. Once decrypted, you can open the file in an XML viewer and see the exposed XML tags.

  • Decryption syntax:>SCSEncryption.exe Decrypt <input_filename> <password> /Output <output_filename>

Once these tags are exposed, a developer can create custom profiles files and customize them to the needs of the users and environmental requirements. 

Console Integration

The most common console integration uses host-based configuration. This method utilizes the host's OS (Windows* 7+) with a scripted configuration solution for automating the configuration process.

Automating the configuration process will vary from application to application; however, the basic requirements remain the same:

  1. Create the profile.xml file on the server.
  2. Automate the push/pull of the required files for configuration: 
    1. The “configurator” folder from the Intel SCS download
    2. The profile.xml file 
  3. From a command prompt with “Run as Administrator” privileges, run the following command: "acuconfig.exe configamt <profile.xml> /decryptionpassword <PASSWORD>"
  4. The configuration is successful if the program exits with code 0.

 

*No product or component can be absolutely secure.

Parent topic: Configuration
Level Two Title