HP ZBook 17 Base Model Mobile Workstation Bedienungsanleitung Seite 1

Technical white paper Setting up and configuring Intel AMT in HP Business Notebooks, Desktops, and Workstations Detailed instructions for the IT pro

10. From the Intel AMT Configuration menu, select SOL/IDER/KVM. The SOL/IDER/KVM screen appears, as shown in Figure 6. Review the following setting

11. From the Intel AMT Configuration menu, select User Consent. The User Consent screen appears, as shown in Figure 7. Review the following settings

12. Review the Password Policy setting shown in the Intel AMT Configuration screen. This setting specifies when it is possible to change the MEBx pa

13. Select Network Setup from the Intel AMT Configuration menu. The Intel ME Network Setup screen appears, as shown in Figure 9, allowing you to con

14. Select Intel ME Network Name Settings from the Intel ME Network Setup menu. The Intel ME Network Name Settings screen appears, as shown in Figur

– Dynamic DNS Update: Disabled (Recommended setting; default) If Dynamic DNS (DDNS) update is enabled, the firmware will actively try to regi

Configuring IPv4 Select Wired LAN IPV4 Configuration and then configure the parameters shown in Figure 12. Figure 12. Configuring the network for IPv4

Configuring IPv6 Both wired and wireless6 IPv6 can be enabled via an SCS or, as in this example, the WebUI. Review the TCP/IPv6 settings for wired a

If you wish to use wireless Intel AMT connectivity, you must first connect to the Intel AMT system from a remote system using wired LAN in order to cr

iii. In the Profiles field box (Figure 15), click New to create a new wireless profile. Figure 15. Selecting New to create a new wireless profile

Executive summary Select HP models use Intel® vPro processor technology to simplify PC management and reduce IT-related expenditures. A key element of

iv. Enter the following data for the new wireless profile, as shown in Figure 16: – Profile name: (any name) – Network name (SSID):

v. Select System Status to display the Wireless IP address, as shown in Figure 17. Note Wireless Intel AMT only supports IPv6 addresses. Figure 1

16. Having completed the network setup, select Activate Network Access from the Intel AMT Configuration menu, as shown in Figure 18. This setting cau

19. Select Power Control from the Intel AMT Configuration menu (shown in Figure 19). Select the appropriate Intel AMT ON in Host Sleep States setting

Figure 21. Options for Intel AMT ON in Host Sleep States setting Recommended setting: Desktop: ON in S0, ME Wake in S3, S4-5 Note After you act

20. Select the appropriate Idle Timeout value for Wake-On-ME in minutes, as shown in Figure 22. – Idle Timeout: 65535 (Recommended setting;

• Adding new users and passwords • Updating ME firmware WebUI support is enabled by default for Manual mode setup and configuration. Connecting wit

Enterprise mode setup and configuration This section provides instructions and guidelines for Intel AMT setup and configuration (provisioning) in Ente

• Using a USB drive key – A USB drive key can be used for zero-touch provisioning. With this method, password, PID, and PPS information is loaded to

4. The SCS logs into the Intel AMT system and provisions all required data items, including the following: – New PPS and PID for future configuratio

Support Intel AMT technology is available on the following select HP models: Note Remote access to a client PC can be wired or wireless, depending on

Using the key The following are typical stages in the use of a USB drive key: 1. An IT technician inserts a USB drive key into the system hosting the

Since the Intel AMT system is already running an OS, provisioning can take place at any time. The local agent contacts the SCS, which responds by tell

• The SCS must have a server certificate with the appropriate object identifier (OID) or organizational unit (OU): – Unique Intel AMT OID value in t

2. Review the Intel Automated Setup and Configuration menu items (shown in Figure 23). Figure 23. Menu used to enable remote provisioning – Curre

– RCFG Remote Configuration (RCFG) is an Intel AMT feature that allows a single OEM OS image to provision systems securely, without the need to ma

Note The admin password, PID, and PPS can be pre-populated by HP during manufacturing. Refer to the OEM TLS-PSK provisioning section for more infor

In Intel AMT 9.x, the MEBx allows you to manually activate a hash and use up to three additional certificate hashes. To add a hash: i. Press the Inse

• Partial unprovisioning Only available for systems provisioned in Enterprise mode, partial unprovisioning returns all Intel AMT configuration settin

Appendix A: Frequently asked questions Q: How can I access the MEBx locally? A: The MEBx can be locally accessed by selecting Esc from the startup men

Q: What is the difference between the ME and Intel AMT? A: The ME is the controller that, along with Intel Protected Audio Video Path (PAVP) capabilit

Setting up and configuring Intel AMT Before it can be used, Intel AMT must be setup and configured, which involves the following activities: • Setup

Appendix B: Overview of power, sleep, and global states Under the Advanced Configuration and Power Interface (ACPI) specification, a PC may be in one

Appendix C: Wake-On-ME overview Wake-On-ME, also known as ME Wake-on-LAN (ME WoL), is a feature that allows the ME to go into a low power state when i

Appendix D: Supported certificates The following are supported certificate authorities and certificates (see also Figure D-1): Note Not all certifica

Resources, contacts, or additional links Intel vPro Technology www.intel.com/technology/vpro/index.htm Sign

Creating a password To reduce vulnerability to a dictionary attack, MEBx enforces the following minimum criteria for a password: • 8 – 32 characters

Setup and configuration procedure When you explore MEBx options for the first time (Factory phase), default settings are in place. This white paper de

4. From the MEBX main menu, select Intel ME General Settings, as shown in Figure 2. Figure 2. Selecting the Local FW Update option 5. Select Local

6. As shown in Figure 4, HP recommends enabling Local FW Update, which is the default setting. Unless otherwise specified, the system BIOS allows ME

9. From the Intel AMT Configuration menu (shown in Figure 5), select Manageability Feature Selection. This option allows Intel AMT to be enabled (re