HP 8100 - Elite Convertible Minitower PC Bedienungsanleitung

vPro Setup and Configuration for the

8100 Business PC with Intel vPro

Processor Technology

January 2010

Table of Contents:

Introduction ........................................................................................................2

AMT Setup and Configuration..............................................................................3

AMT System Phases ........................................................................................3

Manual Mode – AMT Setup and Configuration with MEBx ................................3

BIOS Prerequisite ............................................................................................5

Manual Mode (SMB Mode) – AMT Setup and Configuration Steps: ....................5

Intel AMT WebGUI ............................................................................................23

Connecting with the Intel AMT WebGUI - SMB Example:.................................23

Setup and Configuration Server .........................................................................25

Setup and Configuration Server Availability .......................................................25

Enterprise Mode Setup and Configuration ..........................................................25

Enterprise Mode – AMT Setup and Configuration Steps:..................................26

Provisioning Methods ........................................................................................36

Legacy..........................................................................................................36

IT TLS-PSK.....................................................................................................36

OEM TLS-PSK ................................................................................................37

USB Drive Key Setup and Configuration .............................................................37

USB Drive Key Requirements .........................................................................38

Remote Configuration........................................................................................39

Remote Configuration Timeouts in HP Systems................................................39

Remote Configuration Prerequisites................................................................40

MEBx and Hashes .........................................................................................40

List of Supported CA Certificates ....................................................................42

Return to Default ...............................................................................................43

Full Return to Factory Defaults............................................................................44

Appendix B: Power / Sleep / Global States Explained........................................47

Appendix C: Wake-On-ME Explained ................................................................48

Introduction

The HP Compaq dc8100 Business PC utilizes Intel vPro processor technology to

simplify PC management and reduce IT related expenditures. Intel vPro processor

technology utilizes Intel Active Management Technology (AMT), which allows for

improved management of PC systems and better security.

Intel vPro processor technology is no longer supporting Virtual Appliances. This is

a change from previous generations of HP Compaq dx7 Business PCs with Intel

vPro processor technology.

AMT provides Out-of-Band (OOB) remote access to a system regardless of the

system power state or operating system condition as long as the system is

connected to a power source and a network. AMT is a hardware and firmware

platform resident solution relying upon the Management Engine (ME) within the

Intel Q965, Q35, Q45 Express, and Q57 chipset.

Below is a brief history of AMT evolution.

A M T 1.0 Introduced with the Intel 945 chipset, but was not shipped with HP

Business PCs.

AMT 2.0 Introduced with the Intel Q965 chipset and was shipped with HP

Compaq dc7700p Business PCs.

A M T 2 .1 Introduced in March 2007 and was shipped with HP Compaq

dc7700p Business PCs.

AMT 2.2 Available as a web download in the Fall of 2007 with the HP Compaq

dc7700p Business PCs.

AMT 3.0 Introduced with the Intel Q35 Express chipset and was shipped with

the HP Compaq dc7800p systems.

AMT 3.2 Introduced with the HP Compaq dc7800p April 2008 Refresh.

AMT 5.0 Introduced with the Intel Q45 Express chipset and was shipped with

the HP Compaq dc7900 systems.

AMT 6.0 Introduced with the Intel Q57 chipset and was shipped with the HP

Compaq 8100 systems.

This whitepaper has been updated to include the new features of AMT 6.0.

By default, the AMT shipping on the HP Compaq 8100 Business PC will be inactive.

It must be setup and configured in the system before it can be used. The setup and

configuration process is also known as provisioning. There are two methods of

AMT setup and configuration:

•Manual mode (similar to Small Medium Business (SMB) mode in AMT 5.0)

•Enterprise mode

This whitepaper details Manual mode and Enterprise mode setup and configuration

for the client PC along with the usage of a Setup and Configuration Server (SCS) in

Enterprise mode. Please consult with your Management Console ISV provider for

details regarding installation procedures for a Setup and Configuration Server.

Basic knowledge of Intel AMT and networking are required.

Please refer to the Intel website: www.intel.com/technology/vpro/index.htm for

other whitepapers and technical information regarding Intel vProTM Technology.

AMT Setup and Configuration

AMT must be Setup and Configured in a system before it can be used.

AMT Setup involves the necessary steps to enable AMT such as setting up the

system for AMT mode and enabling network connectivity. It is generally performed

only once for the lifetime of the system. When AMT is enabled, it can be

discovered by management software over a network.

AMT Configuration is setting up all the other AMT options not covered in AMT

Setup such as enabling the system for Serial-Over-LAN (SOL) or IDE-Redirect (IDE-R).

Settings modified in the Configuration phase can be changed many times over the

course of a system’s lifespan. Changes can be made to the system locally or

through a management console.

AMT System Phases

An AMT system can be in one of three phases in regards to its current stage of

AMT Setup and Configuration.

Three Phases of AMT Setup and Configuration:

•Factory

•In-Setup

•Operational

The Factory phase is the initial stage. The system had been built from the factory.

No AMT Setup and Configuration has been done. The only way to access AMT in

Factory phase is through the MEBx. This phase will end for Manual mode systems

once the default password has been changed. Enterprise mode systems also

require the Provisioning ID (PID) and Provisioning Passphrase (PPS) to be set. More

details on passwords, PIDs, and PPS in later sections.

The In-Setup phase is the next stage where most AMT options are set. This can be

a manual procedure or an automated one with a Setup and Configuration Server.

The Operational phase is the final stage. AMT is fully Setup and Configured in the

system and ready for normal use.

Manual Mode – AMT Setup and Configuration with MEBx

Manual mode is for customers who do not have Independent Software Vendors

(ISV) management consoles, or the necessary network and security infrastructures to

use encrypted Transport Layer Security (TLS). Manual mode AMT Setup and

Configuration is a manual process done through the Intel ME BIOS Extension

(MEBx).

Manual mode is the easiest to implement since it does not require much

infrastructure, but it is the least secure since all network traffic is not encrypted. HP

recommends that this be done in a closed network.

Important Note:

The MEBx is an option ROM module that is provided to

HP by Intel to be included in the HP system BIOS. The

MEBx is not HP-specific and contains options that are not

used by HP. If an option is not used by HP, ignore it and

do not modify from its default state.

MEBx passwords must meet the minimum criteria to be accepted. These restrictions

are enforced by the MEBx to reduce vulnerability of passwords to a dictionary

attack.

Password Guidelines

Criteria:

•Password must be between 8 and 32 characters long.

•Password must contain both upper and lower case Latin characters (e.g. A, a,

B, b).

•Password must have at least one digit character (e.g. 0, 1, 2, … 9).

•Password must have at least one 7-bit ASCII non-alphanumeric character with

an ASCII value between 33d and 126d that is not part of the invalid character

list below.

Some examples:

Exclamation !

At @

Number #

Dollar $

Percent %

Caret ^

Asterisk *

The underscore ‘_’ is considered alpha-numeric.

The following characters are not allowed:

Quotation mark “

Apostrophe ‘

Comma ,

Greater than >

Less than <

Colon :

Ampersand &

Space

BIOS Prerequisite

This whitepaper is for the HP Compaq 8100 Business PCs. The HP Compaq 8100

Business PC uses the 786H1 BIOS family.

For best performance and to take advantage of AMT 6.0 features, make sure the

HP Compaq 8100 Business PCs have a BIOS revision of at least version 1.02, a ME

FW of at least version 6.0.3.1195, and a MEBx of at least version 6.0.3.0019.

The system BIOS and the ME FW must be updated individually. Refer to the BIOS

Flash Whitepaper at www.hp.com for more information on flashing the system

BIOS and ME FW.

Manual Mode (SMB Mode) – AMT Setup and Configuration

Steps:

When going through the options in the MEBx for the first time (Factory phase), the

default settings are in place. This whitepaper details HP recommended settings on

options, some of which may be the same as the default selection. Even though the

default setting is set and used for certain options, it is good practice to double

check important options.

1. Hit Ctrl-P during POST to enter Management Engine BIOS Extension (MEBx)

Setup.

a. This option is by default not shown during the HP splash screen.

b. It can be displayed during POST if set in F10-Setup.

Figure 1: Intel MEBx Password Screen

2. Enter the default password.

The default password is “admin”. Passwords are case sensitive.

The user must change the default password before any changes can be made

in the MEBx.

3. Change the password for the MEBx.

The new password must meet the criteria defined in the Password Guideline

Section, also known as a strong password. It must be entered twice for

verification.

Changing the password indicates that AMT ownership has been established.

The system will go from Factory phase to In-Setup phase. The ME and AMT

options within the MEBx are accessible and the system can be accessed via the

AMT WebGUI.

4. Go into the Intel ME Platform Configuration.

Figure 2: Intel ME Platform Configuration Screen

5. Check the Intel ME State Control.

Default Setting : Enabled

Recommended Setting : Enabled

a. Select Enabled.

This option enables or disables the ME. If set to Disable, the ME is still

initialized during POST and executes any chipset required function(s), but is

halted soon afterwards so that it does not generate any network traffic. It is

used for diagnostic purposes. If there is a problem where the ME is affected, it

can be removed from the system to eliminate it from the suspect list until root

cause is found.

Note that if the ME is disabled, then all AMT functions are also disabled. The

system will not be remotely manageable.

6. Check Password Policy.

Default Setting : Default Password Only

Recommended Setting : Default Password Only

a. Select Default Password Only

This option determines when the user is allowed to change the Intel MEBX

password through the network. The Intel MEBX password can always be

changed via the Intel MEBX user interface.

Default Password Only – The Intel MEBX password can be changed through the

network interface if the default password has not been changed yet.

During Setup and Configuration – The Intel MEBX password can be changed

through the network interface during the setup and configuration process but at no

other time. Once the setup and configuration process is complete, the Intel MEBX

password cannot be changed via the network interface.

Anytime – The Intel MEBX password can be changed through the network interface

at any time

7. Network Setup.

Figure 3: Intel ME Network Name Settings Screen

Intel ME Network Name Settings

a. Enter a Host Name

Default Setting : None

Recommended Setting : User Dependent

Note that spaces are not accepted in the host name. Make sure there is not

a duplicate host name on the network. Hostnames can be used in place of

the system’s IP for any applications requiring the IP address.

b. Domain Name

Enter a domain name

Default Setting : None

Recommended Setting : Network Dependent

The domain name is blank by default. If it is not populated, then the default

domain of “Provisionserver” will be used when connecting to a Setup and

Configuration Server.

If the name of the S&CS is not “Provisionserver” and the domain name is

blank, then an alias must be set up in the DHCP server to redirect the

connection for “Provisionserver” to the proper S&CS domain name.

If the domain name field is populated, then that will be the domain used.

However, if there is no response after four DNS queries to the named

domain, then that domain name will no longer be used and the default

“Provisionserver” will be used.

c. Share/Dedicated FQDN

Default Setting : Shared

Recommended Setting : Shared

This setting determines whether the Intel ME Fully Qualified Domain Name

(FQDN) (i.e. the "HostName. DomainName") is shared with the host and

identical to the operating system machine name or dedicated to the Intel ME.

d. Dynamic DNS Update

Default Setting : Disabled

Recommended Setting : Disabled

If Dynamic DNS Update is enabled then the firmware will actively try to

protocol. If DDNS Update is disabled then the firmware will make no attempt

to update DNS using DHCP option 81 or Dynamic DNS update. If the DDNS

Update state (Enabled or Disabled) is not configured by the user at all then

the firmware will assume its old implementation where the firmware used

DHCP option 81 for DNS registration but did not directly update DNS using

the DDNS update protocol. For selecting “Enabled” for Dynamic DNS

Update it is required that the Host Name and Domain Name must be set.

When DDNS Update option is enabled, the MEBx menu will display

“Periodic Update Interval” and “TTL” options.

- Periodic Update Interval: Enter a desired interval between 20 minutes –

1440 minutes

- TTL: Enter desired time in seconds

8. TCP/IP Settings.

AMT 6.0 supports IPV4 and IPV6 interface. Follow steps 8a-8f to configure for

IPV4 and 8g-8h for IPV6.

Figure 4: Intel ME TCP/IP Settings Screen

a. Wired LAN IPV4 Configuration

DHCP Mode

Default Setting : Enabled

Recommended Setting : Enabled

DHCP can be used if it is available (TCP/IP settings will be configured by a

DHCP server). If DHCP is disabled, then steps 8b through 8f are required to

configure the IPv4 static IP address for Intel AMT.

Figure 5: Intel ME Wired LAN IPv4 Configuration Screen

b. IPV4 Address

Enter a static address

Default Setting : 0.0.0.0

Recommended Setting : Network Dependent

Example: 192.168.0.1

Make sure all AMT systems have a unique static IP address. Multiple systems

sharing the same IP address can lead to network collisions, which will cause

the systems to not respond correctly.

c. Subnet Mask

Enter subnet mask

Default Setting : 255.255.255.0

Recommended Setting : Network Dependent

Example: 255.255.255.0

d. Default Gateway Address

Leave as default value and hit Enter

Default Setting : 0.0.0.0

Recommended Setting : Network Dependent

Leave as 0.0.0.0 if this option is not needed.

e. Preferred DNS Address

Leave as default value and hit Enter

Default Setting : 0.0.0.0

Recommended Setting : Network Dependent

Leave as 0.0.0.0 if this option is not needed.

Andere Handbücher für 8100 - Elite Convertible Minitower PC

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere HP Desktop Handbücher

HP m9350f - Pavilion - Elite Technisches Datenblatt

HP T1000 Bedienungsanleitung

HP Compaq d330 MT Bedienungs- und Wartungshandbuch

HP 300-1020 - TouchSmart - Desktop PC Leitfaden

HP Omni 105-5200 Anleitung zur Verwendung

HP Pavilion 743 Anleitung zur Verwendung

HP Presario SR1200 - Desktop PC Bedienungsanleitung

HP Visualize b1000 - Workstation Bedienungsanleitung

HP xw8600 - Workstation Bedienungsanleitung

HP Pavilion h8-1120 Bedienungsanleitung

HP Digital AlphaStation 255 Family Bedienungsanleitung

HP Workstation xw4100 Bedienungsanleitung

HP Pavilion u1100 - Desktop PC Bedienungsanleitung

HP Pavilion a700 - Desktop PC Anleitung zur Verwendung

HP Compaq dx6050 MT Handbuch

HP Pro 2110 Einrichtungshandbuch

HP Compaq d338 MT Technisches Datenblatt

HP Pavilion v600 - Desktop PC Bedienungsanleitung

HP Pavilion t600 - Desktop PC Bedienungsanleitung

HP TouchSmart 9300 Elite Gebrauchsanweisung

HP Rp3000 - Point of Sale System Bedienungsanleitung

HP Xw4600 - Workstation - 2 GB RAM Installationsanleitung

HP Pavilion Slimline s5-1160 Bedienungsanleitung

HP P Elite SFF 600 G9 Montageanleitung

Beliebte Desktop Handbücher anderer Marken

Asus

Asus E210 Series Bedienungsanleitung

Dell

Dell Inspiron 600m Bedienungsanleitung

Dell

Dell Inspiron 3662 Bedienungsanleitung

TotalFlow

TotalFlow uFLO Bedienungsanleitung

Logitech

Logitech MK320 Bedienungsanleitung

Dell

Dell XPS 730 H2C Bedienungsanleitung

Sony

Sony Vaio Series Bedienungsanleitung

Sony

Sony VGC-LT32E - Vaio All-in-one Desktop Computer Bedienungsanleitung

Alto

Alto MD 250 Bedienungsanleitung

Arbor Technology

Arbor Technology FPC-7800 Series Bedienungsanleitung

Sony

Sony VAIO VGX-TP1 Series Bedienungsanleitung

Asus

Asus Eee Box B204 Bedienungsanleitung

Dell

Dell Optiplex 9010 All In One Bedienungsanleitung

Everex

Everex eXplora Bedienungsanleitung

Lenovo

Lenovo ThinkCentre M75e Bedienungsanleitung

Dell

Dell Alienware Area-51 R4 Bedienungsanleitung

Compaq

Compaq iPAQ Internet Device Bedienungsanleitung

Parker

Parker PA Series Bedienungsanleitung