Defining System Settings
The System Settings window of the Configuration Profile Wizard lets you define several settings in the Intel AMT device.
Note: |
The location in the Configuration Utility from where you open the Configuration Profile Wizard causes different options to show in the System Settings window. |
For information about these settings, see:
Management Interfaces
- Select the interfaces you want to open on the Intel AMT system:
- Web UI – Enables you to manage and maintain Intel AMT systems using a browser-based interface.
- Serial Over LAN – Enables you to remotely manage Intel AMT systems by encapsulating keystrokes and character display data in a TCP/IP stream.
- IDE Redirection – IDE-R enables you to map a drive on the Intel AMT system to a remote image or drive. This functionality is generally used to reboot an Intel AMT system from an alternate drive. Available through AMT 10
- USB Redirection – USB-R enables you to map a drive on the Intel AMT system to a remote image or drive. In contrast to IDE-R, which presents remote floppy or CD drives as though they were integrated in the host machine, USB-R presents remote drives as though they were connected via a USB port. Available on AMT 11.0 and higher
- KVM Redirection – Opens the KVM Redirection interface. For more information about KVM, see Support for KVM Redirection.
- (Optional) When the KVM Redirection check box is selected, the RFB Password for KVM Sessions field is enabled. This password is only necessary if your VNC client uses port 5900 (see VNC Clients). If you enter a password, it must be EXACTLY eight characters (see Password Format).
Power Management Settings
- From the drop-down list, select one of these:
- Always On (S0-S5) – If the system is connected to the power supply, the Intel AMT manageability features are available in any of the system power states. This is the recommended setting.
- Host is On (S0) – The Intel AMT manageability features are available only if the operating system of the Intel AMT system is up and running. You cannot select this setting if the Enable WiFi connection also in S1-S5 operating system power states check box is selected (in the Network Configuration window).
- (Optional) If you selected Always on (S0-S5), you can select the Intel® ME will go into a lower power state when idle check box. If the Intel AMT device supports this feature, the device will go to sleep when there is no activity. When a request arrives, the device automatically wakes up. The Time out if idle field defines the number of minutes the device must wait before it can go to sleep.
Network and Other Settings
-
When you edit a profile for multiple systems, these additional fields are shown:
Define the password of the default admin user built into each Intel AMT device:
- Use the following password for all systems – The password you define here (see Password Format) is set in all devices configured with this profile.
- Create a random password for each system– A different (random) password is generated for each device.
- (Optional) Select Synchronize Intel® AMT clock with the operating system. When this check box is selected, the Intel AMT clock will automatically synchronize with the operating system clock. This option is available only from Intel AMT 9.0 and higher.
Note: |
---|
This option can make it possible for attackers (via a compromised operating system) to change the Intel AMT clock. An unsynchronized clock can cause Kerberos based authentication to Intel AMT to fail. Select this option only if you are sure that the operating systems in your organization are sufficiently secured. |
- (Optional) Select Enable Intel® AMT to respond to ping requests. When this check box is selected, the Intel AMT device will respond to a ping if the host platform does not respond.
- (Optional) You can define which interfaces are open for the local Fast Call for Help feature. If the computer is inside the enterprise network, the user can initiate a connection request to connect to a management console. By default, the user can access this option from the operating system and from the BIOS. To change this setting, do one of these:
- To close both interfaces, clear the Enable Fast Call for Help (within the enterprise network) check box.
- To select which interface to open, click Fast Call For Help Settings and select the interface from the Fast Call for Help interfaces window:
Note: |
---|
- You cannot make changes to this setting if a Fast Call For Help trigger was defined in a Remote Access policy. The setting in the policy will be used for remote and local connection requests.
- To enable the Fast Call for Help feature from outside the enterprise network, see Defining Remote Access.
|
-
When you edit a profile for multiple systems, this additional field is shown in the Network Settings section:
(Optional) Click Set to define the source that Intel SCS will use to define the IP and FQDN of the Intel AMT device. This step is only required if you need to change the default settings (see Defining IP and FQDN Settings).
Note: |
The default network settings that Intel SCS puts in the device will operate correctly for most network environments. |