Amt Setup And Configuration; Amt System Phases; Smb Mode - Amt Setup And Configuration With Mebx - HP dc7900 - Convertible Minitower PC Setup And Configuration Manual

AMT Setup and Configuration

AMT must be set up and configured in a system before it can be used. AMT setup involves the necessary
steps to enable AMT such as setting up the system for AMT mode and enabling network connectivity. This
setup is generally performed only once in the lifetime of a system. When AMT is enabled, it can be dis-
covered by management software over a network.
AMT Configuration sets up all other AMT options not covered in AMT Setup, such as enabling the system
for Serial-Over-LAN (SOL) or IDE-Redirect (IDE-R). Settings modified in the configuration phase can be
changed many times over the course of a system's life span. Changes can be made to the system locally
or through a management console.

AMT System Phases

An AMT system can be in one of three phases in regards to its current stage of AMT Setup and Configu-
ration, as follows:
•
Factory
•
In-Setup
•
Operational
The Factory phase is the initial stage in which the system has been built from the factory and no AMT
setup and configuration has been done. The only way to access AMT in Factory phase is through the
MEBx. This phase will end for SMB mode systems after changing the default password. Enterprise mode
systems also require that you set the Provisioning ID (PID) and Provisioning Passphrase (PPS). More details
about passwords, PIDs, and PPS are provided in later sections of this paper.
The In-Setup phase is the next stage and is where most AMT options are set. This can be a manual or
automated procedure with a Setup and Configuration Server.
The Operational phase is the final stage in which AMT is fully setup and configured in the system and
ready for normal use.

SMB Mode - AMT Setup and Configuration with MEBx

SMB mode is for customers who do not have Independent Software Vendor (ISV) management consoles,
or the necessary network and security infrastructures to use encrypted Transport Layer Security (TLS). SMB
mode AMT set up and configuration is a manual process done through the Intel ME BIOS Extension
(MEBx).
SMB mode is the easiest to implement since it does not require much infrastructure, but is the least secure
since all network traffic is not encrypted. HP recommends using this process only in a closed network.
NOTE: The MEBx is an option ROM module that is provided to HP by Intel to be included in the HP sys-
tem BIOS. The MEBx is not HP-specific and contains options that are not used by HP. If an option is not
used by HP, ignore it and do not modify from its default state.
Password Guidelines
MEBx passwords must meet minimum criteria. These restrictions are enforced by the MEBx to reduce vul-
nerability of passwords to a dictionary attack.
3