HP dc72 - Blade Workstation Client Setup And Configuration Manual page 20

Select Exit, and then select Y to exit the MEBx Setup and save settings. The system displays an Intel
26.
ME Configuration Complete message and reboots.
27. Turn off the system and remove power. The system is now in In-Setup Mode and is ready for deploy-
ment.
28. Plug the system into a power source and connect the network. Use the integrated Intel 82566DM
NIC. Intel AMT does not work with any other NIC solution.
When power is reapplied to the system, the system immediately looks for a Setup and Configuration
Server. If the system finds this server, the AMT system will send a "Hello" message to the server.
DHCP and DNS must be available for the Setup and Configuration Server search to automatically
succeed. If DHCP and DNS are not available, then the Setup and Configuration Server's IP address
must be manually entered into the AMT system's MEBx.
The "Hello" message contains the following information:
• PID
• UUID (Universally Unique Identifier)
• IP address
• ROM and firmware version numbers
The "Hello" message is transparent to the end-user. There is no feedback mechanism to tell the user
the system is broadcasting the message.
The Setup and Configuration Server uses the information in the "Hello" message to initiate a
Transport Layer Security (TLS) connection to the AMT system using a TLS Pre-Shared-Key (PSK) cipher
suite if TLS is supported.
The Setup and Configuration server uses the PID to lookup PPS in provisioning server database and
uses the PPS and PID to generate TLS Pre-Master Secret. TLS is optional. For secure and encrypted
transactions, use TLS if the infrastructure is available. If you do not use TLS, then HTTP Digest will be
used for mutual authentication. HTTP Digest is not as secure as TLS.
Setup and Configuration Server logs into AMT system with the user name and password and
provisions all required data items:
• New PPS and PID (for future Setup and Configuration)
• TLS certificates
• Private keys
• Current date and time
• HTTP Digest credentials
• HTTP Negotiate credentials
You can set other options depending on S&CS implementation.
The system goes from In-Setup phase to Operational phase, and AMT is fully operational. Once in
the Operational phase, you can remotely manage the system and you can provide the system to end-
users for regular use.
20