Difference between revisions of "Intel Active Management Technology (AMT)"

From ThinkWiki
Jump to: navigation, search
m
(added more AMT versions)
 
(25 intermediate revisions by 7 users not shown)
Line 1: Line 1:
__NOTOC__
+
== Intel Active Management Technology (AMT) ==
{| width="100%"
+
Some models offer this specific feature.
|style="vertical-align:top" |
+
{| border="1" cellspacing="0" cellpadding="2"
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;">
+
|| AMT Version(s) || Wired Manageability || Wireless Manageability || Processor || Operating System || Models Supported
=== Intel Active Management Technology (AMT) ===
+
|-
Some Lenovo laptop include some of Intel's Management features.
+
|| 1.0 || Yes || No || ARCtangent-A4 || ThreadX || N/A (was featured only in the 82573E Gigabit Ethernet Controller)
 +
|-
 +
|| 2.0, 2.1, 2.2 || Yes || No || ARCtangent-A4 || ThreadX || N/A (was featured only in the 82Q965 Memory Controller Hub)
 +
|-
 +
|| 2.5, 2.6 || Yes || in ACPI S0 state || ARCtangent-A4 || ThreadX || {{T61p}}, {{T61}}, {{X300}}, {{X61}}, {{X61s}}, {{X61 Tablet}}
 +
|-
 +
|| 3.0, 3.1, 3.2 || Yes || in ACPI S0 state || ARCtangent-A4 || ThreadX || N/A (was featured only in the 82Q35 and 82Q43 Memory Controller Hub)
 +
|-
 +
|| 4.0, 4.1, 4.2 || Yes || Yes || ARCtangent-A4 || ThreadX || {{W700ds}}, {{W700}}, {{W500}}, {{T500}}, {{T400}}, {{T400s}}, {{X301}}, {{X200}}, {{X200s}}, {{X200 Tablet}}, {{R500}}, {{R400}}
 +
|-
 +
|| 5.0, 5.1, 5.2 || Yes || in ACPI S0 state || ARCtangent-A4 || ThreadX || N/A (was featured only in the 82Q45 Memory Controller Hub)
 +
|-
 +
|| 6.0, 6.1, 6.2 || Yes || Yes || ARC 600 || ThreadX || {{W701ds}}, {{W701}}, {{W510}}, {{T510}}, {{T510i}}, {{T410}}, {{T410i}}, {{T410s}}, {{T410si}}, {{X201}}, {{X201i}}, {{X201s}}, {{X201si}}, {{X201 Tablet}}, {{X201i Tablet}}
 +
|-
 +
|| 7.0, 7.1 || Yes || Yes || ARC 600 || ThreadX || {{W520}}, {{T520}}, {{T520i}}, {{T420}}, {{T420i}}, {{T420s}}, {{T420si}}, {{X220}}, {{X220i}}, {{X220 Tablet}}, {{X220i Tablet}}, {{X1}}, {{X1 Hybrid}}
 +
|-
 +
|| 8.0, 8.1 || Yes || Yes || ARC 600 || ThreadX || {{W530}}, {{T530}}, {{T530i}}, {{T430}}, {{T430i}}, {{T431s}}, {{T430s}}, {{T430si}}, {{T430u}}, {{X230}}, {{X230i}}, {{X230s}}, {{X230 Tablet}}, {{X230i Tablet}}, {{X1 Carbon}}, {{L530}}, {{L430}}
 +
|-
 +
|| 9.0, 9.1, 9.5 || Yes || Yes || ARC 600 || ThreadX || {{W541}}, {{W540}}, {{T540p}}, {{T440p}}, {{T440}}, {{T440s}}, {{T440}}, {{X240}}, {{X240s}}, {{X1 Carbon G2}}, {{L540}}, {{L440}}
 +
|-
 +
|| 10.0 || Yes || Yes || ARC 600 || ThreadX || {{W550s}}, {{T550}}, {{T450}}, {{T450s}}, {{X250}}, {{X1 Carbon G3}}, {{L450}}
 +
|-
 +
|| 11.0, 11.5, 11.6, 11.7, 11.8, 11.11, 11.12, 11.22 || Yes || Yes || unknown Quark || MINIX || {{P70}}, {{P50}}, {{P50s}}, {{T560}}, {{T460}}, {{T460s}}, {{T460p}}, {{X260}}, {{X1 Carbon G4}}, {{L560}}, {{L460}}
 +
|-
 +
|| 12.0 || Yes || Yes || unknown Quark || MINIX || {{P71}}, {{P51}}, {{P51s}}, {{T570}}, {{T470}}, {{T470s}}, {{T470p}}, {{25}}, {{X270}}, {{X1 Carbon G5}}, {{L570}}, {{L470}}
 +
|-
 +
|| 13.0 || Yes || Yes || unknown Quark || MINIX || {{P72}}, {{P52}}, {{P52s}}, {{T580}}, {{T480}}, {{T480s}}, {{X280}}, {{X1 Carbon G6}}, {{L580}}, {{L480}}
 +
|-
 +
|| 14.0, 14.5 || Yes || Yes || unknown Quark || MINIX || {{P73}}, {{P53}}, {{P53s}}, {{T590}}, {{T490}}, {{T490s}}, {{X390}}, {{X1 Carbon G7}}, {{L590}}, {{L490}}
 +
|-
 +
|}
  
=== Features ===
+
== Features ==
 
* Management over the Network (LAN and WLAN, using AMT 2.5)
 
* Management over the Network (LAN and WLAN, using AMT 2.5)
 
* Remote Asset (Hardware and Software) Inventory
 
* Remote Asset (Hardware and Software) Inventory
Line 14: Line 44:
 
* System isolation and recovery (Use hardware to filter inbound and outbound traffic, except management traffic)
 
* System isolation and recovery (Use hardware to filter inbound and outbound traffic, except management traffic)
 
* Dedicated Flash memory (Firmware + Inventory + ISV Data)
 
* Dedicated Flash memory (Firmware + Inventory + ISV Data)
</div>
 
|}
 
  
==Hints how to setup it via Intel ME BIOS Extension (MEBx) based on the T61p (Small business Mode)==
+
== Linux support ==
 +
The Linux '''heci''' driver to support iAMT was part of the staging tree as of the 2.6.30 kernel, but [http://driverdev.linuxdriverproject.org/pipermail/devel/2009-September/002458.html removed] in 2.6.32 at the request of Intel as they have indicated having no further interest in it and have abandoned it.
 +
 
 +
* [http://www.openamt.org/ Intel OpenAMT project website] (abandoned)
 +
 
 +
== Hints how to setup it via Intel ME BIOS Extension (MEBx) based on the T61p (Small business Mode) ==
 +
=== Pre-configuration ===
 
* Use ThinkVantage System Update so you have the latest BIOS
 
* Use ThinkVantage System Update so you have the latest BIOS
* You should enable AMT in BIOS
+
* Reboot the system
 +
 
 +
=== Enabling AMT in BIOS ===
 
* Hit the ThinkVantage button during the POST screen, then after the menu appears hit 'F1'
 
* Hit the ThinkVantage button during the POST screen, then after the menu appears hit 'F1'
 
** Select 'Config' on the main screen
 
** Select 'Config' on the main screen
 
*** Select 'Intel(R) AMT'
 
*** Select 'Intel(R) AMT'
**** Set 'Intel(R) AMT Control' to 'Enabled'
+
**** Set 'Intel (R) AMT Control' to 'Enabled'
 
**** Hit 'F10' to Save and Exit
 
**** Hit 'F10' to Save and Exit
  
* After the POST screen you will see the Intel ME BIOS Extension screen. Hit Ctrl+P to enter the setup.
+
=== Configuring Intel ME BIOS Extension for the first time ===
** The default password is 'admin' (without quotes)
+
* After the POST screen you will see the Intel(R) Management Engine BIOS Extension screen.  
** If you try to change the Intel ME password and get "Error - Intel(R) ME password change rejected" message, then you are using a weak password. This are guidelines for the Intel ME strong password:
+
* Hit Ctrl+P to enter the setup.
*** between 8- and 32-characters long
+
* Possibly press "1" to enter Intel(R) Management Engine BIOS Extension configuration screens.
*** Contain both upper and lower case Latin characters
+
* On the first screen you can enter the Intel(R) ME Password.
*** Have at least one numeric character
+
The default password is 'admin' (without quotes)
*** Have at least one ASCII non-alphanumeric character (!, @, #, $, %, ^, &, *)
+
* If you try to change the Intel ME password and get "Error - Intel(R) ME password change rejected" message, then you are using a weak password.  
** Select Intel(R) ME Configuration
+
Here are guidelines for the Intel(R) ME strong password:
*** Select 'Intel(R) ME State Control'
+
** Comprise 8 to 32 characters
**** Set it ENABLED
+
** including both upper and lower case characters
**** Select Return to Previous Menu
+
** including at least one numeric character
*** Select 'Intel(R) ME Firmware Local Update Qualifier'
+
** including at least one ASCII non-alphanumeric character (!, @, #, $, %, ^, &, *)
**** Set it to ALWAYS OPEN
+
 
**** Select Return to Previous Menu
+
=== Enabling AMT in Intel Management Engine BIOS Extension ===
*** Select 'Intel(R) ME Features Control'
+
* On the main Management Engine Bios Extension page select Intel(R) ME Configuration
**** Select 'Manageability Feature Selection'
+
** Select 'Intel(R) ME State Control'
***** Choose 'Intel(R) AMT'
+
*** Set it ENABLED
**** Return to previous menu
+
*** Select Return to Previous Menu
*** Select 'Intel(R) ME Power Control'
+
** Select 'Intel(R) ME Firmware Local Update Qualifier'
**** Select 'Intel (R) ME ON in Host Sleep States'
+
*** Set it to ALWAYS OPEN
***** Set the 'widest' range of Sleep States
+
*** Select Return to Previous Menu
***** Hit 'ESC' to Exit. The system will reboot now.
+
** Select 'Intel(R) ME Features Control'
 +
*** Select 'Manageability Feature Selection'
 +
**** Choose 'Intel(R) AMT'
 +
*** Select Return to Previous menu
 +
** Select 'Intel(R) ME Power Control'
 +
*** Select 'Intel(R) ME ON in Host Sleep States'
 +
**** Set the 'widest' range of Sleep States
 +
**** Hit 'ESC' to Exit. The system will reboot now.
  
 +
=== Configuring AMT via Intel ME ===
 
* Hit Ctrl+P when the Intel ME BIOS messages apear
 
* Hit Ctrl+P when the Intel ME BIOS messages apear
 
* Select 'Intel(R) AMT Configuration'
 
* Select 'Intel(R) AMT Configuration'
 
** Select 'Host Name' and enter the same name as for the OS Host name
 
** Select 'Host Name' and enter the same name as for the OS Host name
** Select 'TCP/IP', and hit twice 'N' to enable the interface and DHCP, then provide your domain name as set (or to be set) in the OS
+
** Select 'TCP/IP'
 +
*** Hit 'N' to enable the Network Interface
 +
*** Hit 'N' to enable DHCP
 +
*** provide your domain name as set (or to be set) in the OS
 
** Select 'Provision Model'
 
** Select 'Provision Model'
 
*** Hit 'N' to not change to AMT 1.0 Mode
 
*** Hit 'N' to not change to AMT 1.0 Mode
 
*** Hit 'Y; to change to Small Business
 
*** Hit 'Y; to change to Small Business
** Select 'SOL/IDE-R', hit 'Y' to confirm the warning, set Username & Password, Serial Over LAN and IDE Redirection to ENABLED
+
** Select 'SOL/IDE-R'
** Select 'Secure Firmware Update' and choose ENABLED
+
*** Hit 'Y' to confirm the warning
 +
*** Set Username & Password to ENABLED (if it's set to ENABLED don't hit just 'ENTER' because you disable it)
 +
*** Set Serial Over LAN to ENABLED
 +
*** Set IDE Redirection to ENABLED
 +
** Select 'Secure Firmware Update'
 +
*** Set it to ENABLED
 
** Hit 'ESC' to Exit. The system will reboot again.
 
** Hit 'ESC' to Exit. The system will reboot again.
  
 +
=== Configuring Windows ===
 
* Use ThinkVantage System Update to get the AMT Software
 
* Use ThinkVantage System Update to get the AMT Software
 
* After update reboot
 
* After update reboot
* After Log-in you should see the message 'Intel(R) Active Management Technology (Intel(R) AMT) status on this computer is enabled.
+
* After Log-in you should see the message 'Intel(R) Active Management Technology (Intel(R) AMT) status on this computer is enabled.'
 +
 
 +
=== Firmware update ===
 +
Lenovo provides Intel AMT firmware updates only in the form of Windows executables. Thus, if you don't have Windows installed on your laptop, for the purpose of updating Intel AMT firmware you will have to use [[Windows_PE|Windows PE]]. Once you boot into [[Windows_PE|Windows PE]], before launching the firmware upgrade with <tt>MEUPDATE.CMD</tt> (which you have to extract from [http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-71137 ''Intel AMT Management Engine Firmware for Windows''] using <tt>wine</tt>) you need to load HECI driver with "<tt>drvload HECI.inf</tt>" (the HECI driver can be extracted with <tt>wine</tt> from [http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-73723 ''Intel AMT Management Engine Interface for Windows'']).
  
=== Links ===
+
== Links ==
 
* See Also [[Centrino Pro]]
 
* See Also [[Centrino Pro]]
 
* Intel - AMT [http://www.intel.com/technology/manage/iamt/index.htm]
 
* Intel - AMT [http://www.intel.com/technology/manage/iamt/index.htm]
 
* Intel® Active Management Technology (Intel AMT) Software Development Kit (SDK) Start Here Guide [http://softwarecommunity.intel.com/articles/eng/1027.htm]
 
* Intel® Active Management Technology (Intel AMT) Software Development Kit (SDK) Start Here Guide [http://softwarecommunity.intel.com/articles/eng/1027.htm]
 
* Tips & Tricks for Setting up & Accessing an Intel AMT Client [http://softwareblogs.intel.com/2008/01/28/tips-tricks-for-setting-up-accessing-an-intel-amt-client/]
 
* Tips & Tricks for Setting up & Accessing an Intel AMT Client [http://softwareblogs.intel.com/2008/01/28/tips-tricks-for-setting-up-accessing-an-intel-amt-client/]
 
+
* Intel-AMT Set And Review Thailand Version  [[http://www.thaithinkpad.com/forum/index.php/topic,2226.0.html]]
=== ThinkPads that may include this feature ===
 
{| border="1" cellspacing="0" cellpadding="2"
 
|| Version || Models
 
|-
 
|| AMT 2.5 || {{T61}}, {{T61p}}, {{X61_Tablet}}
 
|}
 

Latest revision as of 12:49, 25 June 2020

Intel Active Management Technology (AMT)

Some models offer this specific feature.

AMT Version(s) Wired Manageability Wireless Manageability Processor Operating System Models Supported
1.0 Yes No ARCtangent-A4 ThreadX N/A (was featured only in the 82573E Gigabit Ethernet Controller)
2.0, 2.1, 2.2 Yes No ARCtangent-A4 ThreadX N/A (was featured only in the 82Q965 Memory Controller Hub)
2.5, 2.6 Yes in ACPI S0 state ARCtangent-A4 ThreadX T61p, T61, X300, X61, X61s, X61 Tablet
3.0, 3.1, 3.2 Yes in ACPI S0 state ARCtangent-A4 ThreadX N/A (was featured only in the 82Q35 and 82Q43 Memory Controller Hub)
4.0, 4.1, 4.2 Yes Yes ARCtangent-A4 ThreadX W700ds, W700, W500, T500, T400, T400s, X301, X200, X200s, X200 Tablet, R500, R400
5.0, 5.1, 5.2 Yes in ACPI S0 state ARCtangent-A4 ThreadX N/A (was featured only in the 82Q45 Memory Controller Hub)
6.0, 6.1, 6.2 Yes Yes ARC 600 ThreadX W701ds, W701, W510, T510, T510i, T410, T410i, T410s, T410si, X201, X201i, X201s, X201si, X201 Tablet, X201i Tablet
7.0, 7.1 Yes Yes ARC 600 ThreadX W520, T520, T520i, T420, T420i, T420s, T420si, X220, X220i, X220 Tablet, X220i Tablet, X1, X1 Hybrid
8.0, 8.1 Yes Yes ARC 600 ThreadX W530, T530, T530i, T430, T430i, T431s, T430s, T430si, T430u, X230, X230i, X230s, X230 Tablet, X230i Tablet, X1 Carbon, L530, L430
9.0, 9.1, 9.5 Yes Yes ARC 600 ThreadX W541, W540, T540p, T440p, T440, T440s, T440, X240, X240s, X1 Carbon G2, L540, L440
10.0 Yes Yes ARC 600 ThreadX W550s, T550, T450, T450s, X250, X1 Carbon G3, Template:L450
11.0, 11.5, 11.6, 11.7, 11.8, 11.11, 11.12, 11.22 Yes Yes unknown Quark MINIX Template:P70, Template:P50, Template:P50s, T560, T460, T460s, T460p, X260, X1 Carbon G4, Template:L560, Template:L460
12.0 Yes Yes unknown Quark MINIX Template:P71, Template:P51, Template:P51s, T570, T470, T470s, T470p, 25, X270, X1 Carbon G5, Template:L570, Template:L470
13.0 Yes Yes unknown Quark MINIX Template:P72, P52, Template:P52s, T580, T480, T480s, X280, X1 Carbon G6, Template:L580, Template:L480
14.0, 14.5 Yes Yes unknown Quark MINIX Template:P73, Template:P53, Template:P53s, T590, T490, T490s, X390, X1 Carbon G7, Template:L590, Template:L490

Features

  • Management over the Network (LAN and WLAN, using AMT 2.5)
  • Remote Asset (Hardware and Software) Inventory
  • Remote Diagnostic and repair (even if laptop is off or down)
  • Agent Presence Checking (isolate corrupted laptops)
  • Encrypted software update (w/ remote power-on).
  • System isolation and recovery (Use hardware to filter inbound and outbound traffic, except management traffic)
  • Dedicated Flash memory (Firmware + Inventory + ISV Data)

Linux support

The Linux heci driver to support iAMT was part of the staging tree as of the 2.6.30 kernel, but removed in 2.6.32 at the request of Intel as they have indicated having no further interest in it and have abandoned it.

Hints how to setup it via Intel ME BIOS Extension (MEBx) based on the T61p (Small business Mode)

Pre-configuration

  • Use ThinkVantage System Update so you have the latest BIOS
  • Reboot the system

Enabling AMT in BIOS

  • Hit the ThinkVantage button during the POST screen, then after the menu appears hit 'F1'
    • Select 'Config' on the main screen
      • Select 'Intel(R) AMT'
        • Set 'Intel (R) AMT Control' to 'Enabled'
        • Hit 'F10' to Save and Exit

Configuring Intel ME BIOS Extension for the first time

  • After the POST screen you will see the Intel(R) Management Engine BIOS Extension screen.
  • Hit Ctrl+P to enter the setup.
  • Possibly press "1" to enter Intel(R) Management Engine BIOS Extension configuration screens.
  • On the first screen you can enter the Intel(R) ME Password.

The default password is 'admin' (without quotes)

  • If you try to change the Intel ME password and get "Error - Intel(R) ME password change rejected" message, then you are using a weak password.

Here are guidelines for the Intel(R) ME strong password:

    • Comprise 8 to 32 characters
    • including both upper and lower case characters
    • including at least one numeric character
    • including at least one ASCII non-alphanumeric character (!, @, #, $, %, ^, &, *)

Enabling AMT in Intel Management Engine BIOS Extension

  • On the main Management Engine Bios Extension page select Intel(R) ME Configuration
    • Select 'Intel(R) ME State Control'
      • Set it ENABLED
      • Select Return to Previous Menu
    • Select 'Intel(R) ME Firmware Local Update Qualifier'
      • Set it to ALWAYS OPEN
      • Select Return to Previous Menu
    • Select 'Intel(R) ME Features Control'
      • Select 'Manageability Feature Selection'
        • Choose 'Intel(R) AMT'
      • Select Return to Previous menu
    • Select 'Intel(R) ME Power Control'
      • Select 'Intel(R) ME ON in Host Sleep States'
        • Set the 'widest' range of Sleep States
        • Hit 'ESC' to Exit. The system will reboot now.

Configuring AMT via Intel ME

  • Hit Ctrl+P when the Intel ME BIOS messages apear
  • Select 'Intel(R) AMT Configuration'
    • Select 'Host Name' and enter the same name as for the OS Host name
    • Select 'TCP/IP'
      • Hit 'N' to enable the Network Interface
      • Hit 'N' to enable DHCP
      • provide your domain name as set (or to be set) in the OS
    • Select 'Provision Model'
      • Hit 'N' to not change to AMT 1.0 Mode
      • Hit 'Y; to change to Small Business
    • Select 'SOL/IDE-R'
      • Hit 'Y' to confirm the warning
      • Set Username & Password to ENABLED (if it's set to ENABLED don't hit just 'ENTER' because you disable it)
      • Set Serial Over LAN to ENABLED
      • Set IDE Redirection to ENABLED
    • Select 'Secure Firmware Update'
      • Set it to ENABLED
    • Hit 'ESC' to Exit. The system will reboot again.

Configuring Windows

  • Use ThinkVantage System Update to get the AMT Software
  • After update reboot
  • After Log-in you should see the message 'Intel(R) Active Management Technology (Intel(R) AMT) status on this computer is enabled.'

Firmware update

Lenovo provides Intel AMT firmware updates only in the form of Windows executables. Thus, if you don't have Windows installed on your laptop, for the purpose of updating Intel AMT firmware you will have to use Windows PE. Once you boot into Windows PE, before launching the firmware upgrade with MEUPDATE.CMD (which you have to extract from Intel AMT Management Engine Firmware for Windows using wine) you need to load HECI driver with "drvload HECI.inf" (the HECI driver can be extracted with wine from Intel AMT Management Engine Interface for Windows).

Links

  • See Also Centrino Pro
  • Intel - AMT [1]
  • Intel® Active Management Technology (Intel AMT) Software Development Kit (SDK) Start Here Guide [2]
  • Tips & Tricks for Setting up & Accessing an Intel AMT Client [3]
  • Intel-AMT Set And Review Thailand Version [[4]]