Lenovo ThinkCentre M91p Configuration Manual

Lenovo ThinkCentre M91p Configuration Manual

Intel active management technology configuration guide
Hide thumbs Also See for ThinkCentre M91p:

Advertisement

ThinkCentre M91p
Intel Active Management Technology
Configuration Guide

Advertisement

Table of Contents
loading

Summary of Contents for Lenovo ThinkCentre M91p

  • Page 1 ThinkCentre M91p Intel Active Management Technology Configuration Guide...
  • Page 3 ThinkCentre M91p Intel Active Management Technology Configuration Guide...
  • Page 4 First Edition (March 2011) © Copyright Lenovo 2011. LENOVO products, data, computer software, and services have been developed exclusively at private expense and are sold to governmental entities as commercial items as defined by 48 C.F.R. 2.101with limited and restricted rights to use, reproduction and disclosure.
  • Page 5: Table Of Contents

    Chapter 4. Intel AMT setup and configuration mode ... . . configuration on Lenovo ThinkCentre ZTC provisioning ... . M91p desktop computers ..
  • Page 6 ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 7: About This Document

    Intel AMT built-in computers. Chapter 4 “Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers” on page 7 : This chapter provides detailed instructions on how to configure Intel AMT settings on Lenovo ThinkCentre M91p desktop computers.
  • Page 8 ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 9: Chapter 1. Introduction To Intel Vpro And Intel Amt

    Host Based Provisioning HECI Host Embedded Controller Interface IDE-R Integrated Device Electronics - Redirection Internet Protocol Independent Software Vendor Keyboard-Video-Mouse Local Manageability Service Management Engine MEBx Management Engine BIOS Extension Management Engine Interface Nonvolatile memory Original Equipment Manufacturer © Copyright Lenovo 2011...
  • Page 10 PRTC Protected Real Time Clock Pre-shared Key Preboot Execution Environment RCFG Remote Configuration Secure Hash Algorithm Small and Medium Businesses Serial-over-LAN Transmission Control Protocol Transport Layer Security Wake on Lan Zero Touch Configuration ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 11: Chapter 2. Features And Benefits Of Intel Amt

    ThinkCentre M55p Features and benefits ThinkCentre M91p computers built with Intel AMT enable IT administrators to better discover, heal, and protect the networked computing assets. • Discover: Intel AMT stores hardware and software information in nonvolatile memory (NVM). With built-in manageability, Intel AMT enables IT administrators to discover assets remotely, even when computers are turned off.
  • Page 12 ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 13: Chapter 3. Main Features Of Computers Built With Intel Amt

    • Host Based Provisioning (HBP) CIRA ThinkCentre M91p computers built with Intel AMT support the Client Initiated Remote Access (CIRA) function. You can perform this function through ISV applications.. The CIRA function enables client-initiated, secure OOB communication to the manageability console, which includes: •...
  • Page 14: Kvm Redirection

    KVM user interfaces, see “SOL/IDER/KVM” on page 12. Host Based Provisioning ThinkCentre M91p computers built with Intel AMT support the Host Based Provisioning (HBP) function. As a new feature in Intel AMT 7.X, this function provides new interfaces for system setup and configuration through operating systems.
  • Page 15: Chapter 4. Intel Amt Setup And Configuration On Lenovo Thinkcentre M91P Desktop Computers

    Chapter 4. Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers The Intel Management Engine (ME) is an isolated and protected computing resource that runs on an Intel AMT computer. The Intel Management Engine BIOS Extension (MEBx) provides a user interface to change or configure settings that control the operation of the Intel Management Engine (ME).
  • Page 16: Intel Mebx Setup And Configuration

    Select Intel(R) ME General Settings in the Intel MEBx MAIN MENU window and press Enter. The INTEL(R) ME PLATFORM CONFIGURATION window opens (Figure 3). This window enables you to configure the general settings of the Intel ME, such as ME state, ME password, power control, and so on. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 17 MEBx again, you will find that the password has been successfully reset to admin. FW Update Settings Select FW Update Settings and press Enter. The FW Update Settings window opens. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
  • Page 18: Power Control

    ENERGY STAR program and the EuP Lot 6 requirements, the Intel ME can be turned off in various sleep states. Select Power Control and press Enter. The INTEL(R) ME POWER CONTROL window opens. In the INTEL(R) ME POWER CONTROL window, the following options will be displayed. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 19: Intel(R) Amt Configuration

    M0: An Intel ME FW power state when the Intel AMT computer is turned on and operational. M3: An Intel ME FW power state when the Intel AMT computer is in sleep mode, hibernation mode, or turned off. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
  • Page 20: Manageability Feature Selection

    DISABLED because the user authentication is managed through Kerberos. If the Kerberos network authentication protocol is not used, the IT administrator can choose to enable or disable the username and password for the SOL/IDER session. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 21: User Consent

    • Enable Remote Control of KVM Opt-in Policy – When this option is selected, remote users can change the User opt-in policy, and can choose whether to request consent from the local user before the KVM remote control session over a computer is established. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
  • Page 22: Password Policy

    IP address and FQDN on the DNS using the Dynamic DNS Update protocol. Note: Set the host name and domain name before you enable the Dynamic DNS Update feature. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 23 Enables you to enter the alternate DNS address for your Intel AMT computer. Wired LAN IPV6 Configuration Select Wired LAN IPV6 Configuration and press Enter. The WIRED LAN IPV6 CONFIGURATION window opens. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
  • Page 24: Activate Network Access

    The Unconfigure Network Access option enables you to reset network settings including network access control lists (ACLs) to factory default settings. Select Unconfigure Network Access and press Enter. Press Y or N when prompted. If you press Y, the following options will be displayed. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 25: Remote Setup And Configuration

    A value of 0 indicates that the PKI DNS suffix was not configured. A value of 1 indicates that the PKI DNS suffix was configured. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
  • Page 26: Tls Pki

    In-process. TLS PKI Select TLS PKI and press Enter. The INTEL(R) REMOTE CONFIGURATION window opens. The Remote Configuration option is used to enable or disable the remote configuration. Enabling or disabling remote ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 27: Driver Description

    The Intel AMT Management Engine Interface (MEI) is the interface between the host and the Intel ME. The Intel AMT MEI is bi-directional so that both the host and the Intel AMT firmware can initiate transactions. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
  • Page 28: Lms

    The SOL driver is an Intel AMT ME driver. This driver enables the remote display of the managed client user interface through a management console and emulates serial communication over a standard network connection. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 29: Chapter 5. Web User Interface

    Note: You can refer to detailed configuration examples for both manual setup and configuration mode and automatic setup and configuration mode in Appendix A “Examples of configuring Intel AMT in manual and automatic setup and configuration modes” on page 23 © Copyright Lenovo 2011...
  • Page 30: Logging On To The Client

    • View and manage the Intel AMT network settings • View and manage the Intel AMT IPv6 network settings • View and manage the Intel AMT system name settings • View and manage the Intel AMT user accounts ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 31: Appendix A. Examples Of Configuring Intel Amt In Manual And Automatic Setup And Configuration Modes

    6. In the INTEL(R) AMT CONFIGURATION window, select Remote Setup And Configuration ➙ Provisioning Server FQDN. Enter the proper value if needed 7. In the INTEL(R) ME PLATFORM CONFIGURATION window, select Power Control ➙ Intel (R) ME ON in Host Sleep States. © Copyright Lenovo 2011...
  • Page 32: Usb Provisioning

    8. Connect the USB memory key to your Intel AMT computer and restart your computer from the USB memory key. 9. You will receive a message ²Found USB Key for provisioning. Continue with Auto Provisioning (Y/N).² Press Y and then the USB provisioning will be automatically completed. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 33: Appendix B. Factory Default Settings For The Intel Mebx

    ENABLED Delete PID and PPS This will delete the PID and PPS entries. Continue: (Y/N) ENABLED User Opt-in Remote Configuration Opt-in Configurable from Enable Remote Control of PKI DNS Suffix Blank Remote IT KVM Opt-In Policy © Copyright Lenovo 2011...
  • Page 34 GTE CyberTrust Global Root Baltimore CyberTrust Root Cybertrust Global Root Verizon Global Root Entrust.net CA (2048) Entrust Root CA VeriSign Universal Root CA Lenovo AMT Host Name Blank Domain Name Blank Shared/Dedicated FQDN Shared ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
  • Page 35: Appendix C. Notices

    Lenovo representative for information on the products and services currently available in your area. Any reference to a Lenovo product, program, or service is not intended to state or imply that only that Lenovo product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any Lenovo intellectual property right may be used instead.
  • Page 36: Trademarks

    Trademarks Lenovo, the Lenovo logo, and ThinkCentre are trademarks of Lenovo in the United States, other countries, or both. Microsoft and Windows are trademarks of the Microsoft group of companies. Intel and Intel vPro are trademarks of Intel Corporation in the United States, other countries, or both.
  • Page 38 Part Number: 0A23371 Printed in USA (1P) P/N: 0A23371 *0A23371*...

Table of Contents