Vpro, AMT, Intel ME, Disable Consent

BSawy — Wed, 14 Jan 2015 16:28:16 GMT

Is there a way to disable the consent feature for all of my vPro capable machines in my environment?

I have a Dell KACE appliance that I am using to push out the configuration xml file using the following command;

ACUConfig.exe /Output File vProConfigLog.txt ConfigAMT "AMTSettings.xml" /DecryptionPassword mailto:P@ssw0rd123 xxxxxxxxxx

This allows me to connect to my client PC's using VNC Plus directly from the KBOX, but I can't figure out how to disable the consent code remotely.

Maybe this is just not possible?

I created the xml file using the ACU wizard, but I see no option to change or disable user consent/Opt-In settings.

As far as I can tell the only way to disable this is to use a USB key for configuring KVM.

Re: Vpro, AMT, Intel ME, Disable Consent

Bruno_Domignues — Wed, 14 Jan 2015 17:07:41 GMT

Hi,

Using Host Based Configuration (aka. HBC), you can't suppress user consent, it's by design and due security reasons. However if you provision these machines using PKI, you can define if you want or not the User Consent.

Best Regards!

-Bruno Domingues

topic Re: Vpro, AMT, Intel ME, Disable Consent in Intel vPro® Platform

Vpro, AMT, Intel ME, Disable Consent

Re: Vpro, AMT, Intel ME, Disable Consent