HP Dc7800 - Convertible Minitower PC Bedienungsanleitung

vPro Setup and Configuration for the dc7800p Business PC

with Intel vPro Processor Technology

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

AMT Setup and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

AMT System Phases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

SMB Mode - AMT Setup and Configuration with MEBx . . . . . . . . . . . . . . . . . . . . . . . . . . .4

SMB Mode - AMT Setup and Configuration Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Intel AMT WebGUI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Connecting with the Intel AMT WebGUI - SMB Example . . . . . . . . . . . . . . . . . . . . . . . . .14

Setup and Configuration Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Setup and Configuration Server Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Enterprise Mode Setup and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Enterprise Mode - AMT Setup and Configuration Steps . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Provisioning Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24

Legacy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24

IT TLS-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

OEM TLS-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

USB Drive Key Set Up and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

USB Drive Key Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26

Remote Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Remote Configuration: Bare-Metal vs. Delayed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27

Remote Configuration Time-outs in HP Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

Remote Configuration Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

MEBx and Hashes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

List of Supported CA Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

Return to Default . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31

Full Return to Factory Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Appendix A: Frequently Asked Questions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Appendix B: Power / Sleep / Global States Explained . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34

Appendix C: Wake-On-ME Explained . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Introduction

The HP Compaq dc7800p Business PC uses Intel vPro processor technology* to simplify PC management

and reduce IT-related expenditures. Intel vPro processor technology is a combination of Active Manage-

ment Technology (AMT) and Intel Virtualization Technology (VT), which allows for improved management

of PC systems and enhanced security. This white paper assumes some basic knowledge of Intel AMT and

Intel VT.

AMT provides Out-of-Band (OOB) remote access to a system regardless of the system power state or oper-

ating system condition as long as the system is connected to a power source and a network. AMT is a

hardware and firmware platform resident solution relying upon the Management Engine (ME) within the

Intel Q965 and Q35 Express chipsets.

The following is a brief history of AMT evolution:

•AMT 1.0 - Introduced with the Intel 945 chipset, but was not shipped with HP Business PCs.

•AMT 2.0 - Introduced with the Intel Q965 chipset and was shipped with HP Compaq dc7700p Busi-

ness PCs.

•AMT 2.1 - Introduced in March 2007 and was shipped with HP Compaq dc7700p Business PCs.

•AMT 2.2 - Will be available as a Web download in the Fall of 2007 with HP Compaq dc7700p

Business PCs.

•AMT 3.0 - Introduced with the Intel Q35 Express chipset and will be shipped with HP Compaq

d7800p systems.

AMT 3.0 is an important update that provides many new features when compared to the existing AMT

2.x feature set. HP has updated this white paper to include the new features of AMT 3.0.

By default, AMT shipping on the HP Compaq dc7800p Business PC will be inactive. It must be set up and

configured in the system before it can be used. The setup and configuration process is also known as pro-

visioning. There are two methods of AMT set up and configuration:

•Small Business (SMB) mode

•Enterprise mode

This white paper details Small Business mode and Enterprise mode setup and configuration for the client

PC along with the usage of a Setup and Configuration Server (SCS) in Enterprise mode. Please consult

with your Management Console ISV provider for details regarding installation procedures for a Setup and

Configuration Server.

Basic knowledge of Intel AMT and networking are required.

Please refer to www.hp.com for other white papers and technical information regarding new HP Com-

paq dc7800p Business PCs and new Intel vPro processor technology.

*The HP dc7800p PC is enabled for Intel vPro Processor Technology. Some functionality of this technology, such as Intel Active Man-

agement Technology and Intel Virtualization Technology, requires additional 3rd party software to run. Availability of future “virtual

appliance” applications for Intel vPro Processor Technology is dependant on 3rd party software providers. Compatibility of this gen-

eration of Intel vPro Processor Technology-based hardware with future “virtual appliances” and the Microsoft Windows Vista operat-

ing system is yet to be determined.

AMT Setup and Configuration

AMT Setup involves the necessary steps to enable AMT such as setting up the system for AMT mode and

enabling network connectivity. This setup is generally performed only once in the lifetime of a system.

When AMT is enabled, it can be discovered by management software over a network.

AMT Configuration sets up all other AMT options not covered in AMT Setup, such as enabling the system

for Serial-Over-LAN (SOL) or IDE-Redirect (IDE-R). Settings modified in the configuration phase can be

changed many times over the course of a system’s life span. Changes can be made to the system locally

or through a management console.

AMT System Phases

An AMT system can be in one of three phases in regards to its current stage of AMT Setup and Configu-

ration, as follows:

•Factory

•In-Setup

•Operational

The Factory phase is the initial stage in which the system has been built from the factory and no AMT

Setup and Configuration has been done. The only way to access AMT in Factory phase is through the

MEBx. This phase will end for SMB mode systems after changing the default password. Enterprise mode

systems also require that you set the Provisioning ID (PID) and Provisioning Passphrase (PPS).

The In-Setup phase is the next stage and is where most AMT options are set. This can be a manual or

automated procedure with a Setup and Configuration Server.

The Operational phase is the final stage in which AMT is fully setup and configured in the system and

ready for normal use.

SMB Mode - AMT Setup and Configuration with MEBx

SMB mode is for customers who do not have Independent Software Vendor (ISV) management consoles,

or the necessary network and security infrastructures to use encrypted Transport Layer Security (TLS). SMB

mode AMT set up and configuration is a manual process done through the Intel ME BIOS Extension

(MEBx).

SMB mode is the easiest to implement since it does not require much infrastructure, but is the least secure

since all network traffic is not encrypted. HP recommends using this process only in a closed network.

NOTE: The MEBx is an option ROM module that is provided to HP by Intel to be included in the HP sys-

tem BIOS. The MEBx is not HP-specific and contains options that are not used by HP. If an option is not

used by HP, ignore it and do not modify from its default state.

Password Guidelines

MEBx passwords must meet minimum criteria. These restrictions are enforced by the MEBx to reduce vul-

nerability of passwords to a dictionary attack.

Passwords must:

•Be between 8 and 32 characters long.

•Contain both upper and lower case Latin characters (e.g. A, a, B, b).

•Have at least one digit character (e.g. 0, 1, 2, … 9).

•Have at least one 7-bit ASCII non-alphanumeric character with an ASCII value between 33d and

126d that is not part of the invalid character list below.

Examples of valid characters include:

•Exclamation !

•At @

•Number #

•Dollar $

•Percent %

•Caret ^

•Asterisk *

The underscore '_' is considered alpha-numeric.

The following characters are not allowed:

• Quotation mark "

• Apostrophe '

• Comma ,

• Greater than >

•Lessthan <

•Colon :

•Ampersand &

• Space

BIOS Prerequisite

This white paper is for use with both HP Compaq dc7700p and dc7800p Business PCs.

•The HP Compaq dc7700p Business PC uses the 786E1 BIOS family.

•The HP Compaq dc7800p Business PC uses the 786F1 BIOS family.

For best performance and to take advantage of AMT 3.0 features, make sure HP Compaq dc7800c PCs

have a BIOS revision of at least version 1.04 and a ME firmware of at least 3.0.1.1104 and a MEBx of at

least version 3.0.2.0004.

Shipping HP Compaq dc7700p Business PCs with AMT 2.0 or 2.1 can be upgraded to AMT 2.2 through

a BIOS upgrade available using Web download.

For best performance and to take advantage of AMT 2.2 features, make sure HP Compaq dc7700p Busi-

ness PCs have a BIOS revision of at least version 3.03, an ME firmware of at least version 2.2.1.1034, and

a MEBx of at least version 2.1.4.000.

Updating an HP Compaq dc7700p system from AMT 2.0 or 2.1 to AMT 2.2 by flashing the BIOS will

install five Verisign certificates so the system can be used in Remote Configuration.

Using Remote Configuration on an HP Compaq dc7700p system that has been updated to AMT 2.2

requires updating the MEI (HECI.SYS) driver to version 2.1.22.1026 or better.

See the Remote Configuration Section for more information on this provisioning method and the types of

certificates used.

The system BIOS and the ME firmware must be updated individually. Refer to the BIOS Flash white paper

at www.hp.com for more information about flashing the system BIOS and ME firmware.

SMB Mode - AMT Setup and Configuration Steps

When going through the options in the MEBx for the first time (Factory phase), the default settings are in

place. This white paper details HP-recommended settings for options, some of which may be the same as

the default selection. Even though the default setting is set and used for certain options, it is good practice

to double-check important options.

1. Press Ctrl+P during POST to enter Manageability Engine BIOS Extension (MEBx) Setup. You can dis-

play this option only during POST if set in F10-Setup.

Figure 1 Intel MEBx Password Screen

2. Type the default password, which is admin. Passwords are case-sensitive.

NOTE: You must change the default password before making changes to the MEBx options.

3. Change the MEBx password. The new password must meet the Strong Password criteria defined in

the Password Guidelines Section. Type the password twice for verification.

Change the password to establish AMT ownership. The system will go from Factory phase to In-Setup

phase. The ME and AMT options within the MEBx are accessible and you can access the system

using the AMT WebGUI.

4. Select the Intel ME Platform Configuration. A window displays indicating that the system resets after

configuration.

5. Select Y. ME platform configuration allows IT personnel to configure ME features such as AMT/ASF

selection, power options, firmware update capabilities, and so on.

Figure 2 Intel ME Platform Configuration screen

6. Select Intel ME State Control, and then select Enabled.

Default Setting = Enabled, Recommended Setting = Enabled

This option enables or disables the ME and is used for diagnostic purposes. If set to Disabled, the

ME is still initialized during POST, but is halted soon afterward so that it does not generate any traffic.

If there is a problem that affects the ME, it can be removed from the system to eliminate it from the

suspect list until root cause is found.

Note that if the ME is disabled, then all AMT and ASF functions are also disabled. The system will not

be remotely manageable.

7. Select Intel ME Firmware Local Update Qualifier.

Default Setting = Always Open, Recommended Setting = Always Open

This option allows the BIOS to override the ME Firmware Locale Update option and to permit local

ME firmware updates.

Always Open is the default and allows for as many local updates as the system BIOS allows,

which is unlimited.

Choosing Never Open or Restricted adds the Intel ME Firmware Local Update option, which can

be set to Enable or Disable. By default it is Disabled. This option, along with the Qualifier, dictates

whether ME firmware local updates are allowed. "Never Open" ignores what is set in the system

BIOS and follows the Intel ME Firmware Local Update option.

"Restricted" ignores what is set in the system BIOS and allows local ME firmware updates until the ME

is configured.

8. Select Intel ME Features Control.

a. Select Manageability Feature Selection.

Default Setting = Intel AMT, Recommended Setting = Intel AMT

This option sets the platform management mode: None, Intel AMT, or ASF.

By default, HP Compaq dc7800p Business PCs are set to Intel AMT, and ASF is an available

option.

Note that setting the None option will disable all remote management capabilities. Setting

None will also unprovision any AMT settings.

i. Select Intel AMT.

ii. Select Return to previous menu.

Figure 3 Intel ME Features Control Screen with AMT selected

iii. Select Return to the previous menu.

Never Open Restricted

ME Firmware Local Update

Enabled

Local ME firmware updates

allowed.

Local ME firmware updates allowed.

ME Firmware Local Update

Disabled

Local ME firmware updates

NOT allowed.

Local ME firmware updates allowed

only until the ME is configured.

9. Select Intel ME Power Control.

Figure 4 Intel ME Power Control Screen

a. Select Intel ME ON in Host Sleep States, and then select Desktop:ON in S0, S3, ME

WoL in S3, S4-5, OFF After Power Loss.

Default Setting = Desktop: ON in S0, Recommended Setting = Desktop: ON is S0, S3, ME WoL

in S3, S4-5, OFF After Power Loss

This option sets the ME power policy when the system is in a sleep state (Sx) and when returning

from a G3 power loss.

Table 2: ME Power State During Host Sleep State

ME ON in Host Sleep State ME Behavior

Option 1 ME is ON only when the system is in S0.

Option 2 ME is ON only when the system is in S0 or S3.

Option 3 ME is ON at all times S0, S3, S4, and S5.

Option 4 ME is ON only when the system is in S0. It will be asleep in

S3 unless it is called upon. Timer for ME sleep is set by the

Idle Timeout option.

Option 5 ME is ON only when the system is in S0. It will be asleep in

S3 - S5 unless it is called upon. Timer for ME sleep is set by

the Idle Timeout option.

See “Appendix B: Power / Sleep / Global States Explained” on page 33 for an explanation of

sleep/ power states.

See “Appendix C: Wake-On-ME Explained” on page 34 for an explanation of Wake-On-ME/

ME WoL.

b. Select Return to the previous menu.

10. Return to previous menu to exit the MEBx Setup and save ME configuration. The system will display an

Intel ME Configuration Complete message and reboot. After the ME Configuration is complete, you

can configure the AMT on the next boot.

11. Press Ctrl-P during POST to enter MEBx Setup again.

12. Type the MEBx password.

13. Select Intel AMT Configuration.

Figure 5 Intel AMT Configuration screen

14. Select Host Name, and then type a host name.

Default Setting = HPSystem, Recommended Setting = User Dependent

Option 6 ME is ON at all times S0, S3, S4, and S5. ME will not auto-

matically initialize after recovering from a G3 power loss.

Option 7 ME is ON only when the system is in S0. It will be asleep in

S3 - S5 unless it is called upon. Timer for ME sleep is set by

the Idle Timeout option. ME will not automatically initialize

after recovering from a G3 power loss.

ME ON in Host Sleep State ME Behavior

NOTES: Spaces are not accepted in the host name. Make sure there is not a duplicate host name on the

network. You can use host names in place of the system’s IP for any applications requiring the IP address.

15. Select TCP/IP.

a. Select Disable Network Interface, and then select N.

Default Setting = Network Interface Enabled, Recommended Setting = Network Interface

Enabled

If the network is disabled, then all remote AMT capabilities are disabled and TCP/IP settings are

not necessary.

This option is a toggle, and the next time you access it you are prompted with the opposite

setting.

b. Select DHCP Disable, and then select Y.

Default Setting = DHCP Enabled, Recommended Setting = User Dependent

You can use DHCP if it is available. If you use DHCP, then steps 15c through 15g are not

necessary. Otherwise, the system administrator will have to configure TCP/IP settings.

For the purpose of this white paper, DHCP is disabled so steps 15c through 15g can be

illustrated. Step h will appear for both DHCP and Static configurations.

c. Select IP Address, and then type a static address.

Default Setting = 10.0.0.2, Recommended Setting = Network Dependent

Example: 192.168.0.1

Make sure all AMT systems have a unique static IP address. Multiple systems sharing the same IP

address can lead to network collisions, which will cause the systems to not respond correctly.

d. Select Subnet Mask, and then type a subnet mask.

Default Setting = 255.255.255.0, Recommended Setting = Network Dependent

Example: 255.255.255.0

e. Select Default Gateway Address, and then accept the default and press Enter.

Default Setting = 0.0.0.0, Recommended Setting = Network Dependent,

Leave as 0.0.0.0 if this option is not needed.

f. Select Preferred DNS Address, and then accept the default value and press Enter.

Default Setting = 0.0.0.0, Recommended Setting = Network Dependent

Leave as 0.0.0.0 if this option is not needed.

g. Select Alternate DNS Address, and then accept the default value and press Enter.

Default Setting = 0.0.0.0, Recommended Setting = Network Dependent

Leave as 0.0.0.0 if this option is not needed.

h.Select Domain Name, and then type a domain name

Default Setting = none, Recommended Setting = Network Dependent

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere HP Desktop Handbücher

HP Kayak XU 03xx Handbuch

HP 742n - Pavilion - 512 MB RAM Bedienungsanleitung

HP Vectra XU6 Bedienungsanleitung

HP s3330f - Pavilion - Slimline Technisches Datenblatt

HP Rp5700 - Point of Sale System Bedienungsanleitung

HP dx2040 - Microtower PC Einrichtungshandbuch

HP EliteOne 800 G3 Bedienungsanleitung

HP 8000f - Elite Ultra-slim Desktop PC Bedienungs- und Wartungshandbuch

HP A320m - Pavilion - 256 MB RAM Bedienungsanleitung

HP Xw4550 - Workstation - 2 GB RAM Bedienungsanleitung

HP ProDesk 400 G1 Handbuch

HP Pavilion 8290 Bedienungsanleitung

HP s7700n - Pavilion - Slimline Technisches Datenblatt

HP 9000 Series 310 Bedienungs- und Montageanleitung

HP -380467-003 - COMPAQ PRESARIO C300 C500 C700 F500 F700 LAPTOP... Montageanleitung

HP dx2280 - Microtower PC Gebrauchsanweisung

HP Presario All-in-One CQ1-1000 - Desktop PC Gebrauchs- und Wartungshandbuch

HP Compaq dx2450 MT Bedienungsanleitung

HP dx5150 Bedienungsanleitung

HP 8000 - Elite Convertible Minitower PC Gebrauchsanweisung

HP Vectra XA 6/xxx Anleitung zur Verwendung

HP Compaq Presario Handbuch

HP Presario SR1200 - Desktop PC Bedienungsanleitung

HP Workstation xw8000 Handbuch

Beliebte Desktop Handbücher anderer Marken

Asus

Asus E210 Series Bedienungsanleitung

Dell

Dell Inspiron 600m Bedienungsanleitung

Dell

Dell Inspiron 3662 Bedienungsanleitung

TotalFlow

TotalFlow uFLO Bedienungsanleitung

Logitech

Logitech MK320 Bedienungsanleitung

Dell

Dell XPS 730 H2C Bedienungsanleitung

Sony

Sony Vaio Series Bedienungsanleitung

Sony

Sony VGC-LT32E - Vaio All-in-one Desktop Computer Bedienungsanleitung

Alto

Alto MD 250 Bedienungsanleitung

Lenovo

Lenovo ThinkCentre Edge 72 Handbuch

Lenovo

Lenovo ThinkStation D20 Handbuch

Arbor Technology

Arbor Technology FPC-7800 Series Bedienungsanleitung

Sony

Sony VAIO VGX-TP1 Series Bedienungsanleitung

Asus

Asus Eee Box B204 Bedienungsanleitung

Dell

Dell Optiplex 9010 All In One Bedienungsanleitung

Everex

Everex eXplora Bedienungsanleitung

Lenovo

Lenovo ThinkCentre M75e Bedienungsanleitung

Dell

Dell Alienware Area-51 R4 Bedienungsanleitung

HP dc7800 - Convertible Minitower PC Bedienungsanleitung

Beliebte Desktop Handbücher anderer Marken