Fabric Mode...Setup Mode...and SCS ?

[alberto_sagan]

Hi,

I have another doubt: I have read that using Intel SCS, you dont need to go and configure physically the machine...but I also read that there are three AMT modes (fabric mode, setup mode and operational mode). Initially AMT is in Fabric Mode and when you configure manually AMT BIOS, it goes to Setup Mode. When it is in Setup Mode, it is supposed to be possible to configure remotely with SCA.

Is it OK? If not, what is the right process?

Is it possible to setup and configure remotely an AMT device without previous physical contact by an IT?? I want to say, that if you open a new office and you send a new AMT device directly from the shop...could you remotely configure with SCS and afterwards, remotely manage with a management console? Or should you go and set the device in Setup Mode and afterwards, you could remotey configure with SCS and remotely manage?

Thanks a lot

[Sreelekshm_S_Intel]

Hi,

There are 3 modes or stages that the AMT system has to go through before it is operationa- factory mode, setup mode and operational mode. AMT system comes from factory in factory mode whereAMT is unconfigured. When the user configures the AMT settings through Bios, it enters into setup mode. This is the stage where it waits for configuration settings from SCS. Please read more about this processes in the Developers' guide for SCS

Remote configuration is possible for AMT versions 2.2/2.6/3.0 and onwards.This feature allows setup and configuration of an Intel AMT device without having to install a PID/PPS pair.They usually come withone or more pre-installed root certificate hashes used to authenticate the setup and configuration application. Youy can find more aboutthis under Remote Configuration section in page 20 of the Developer's guide.

Thanks,

Sree

[jacace]

Hello Sree,



Just to clarify: root certificates are installed in BIOS by an OEM?



Thanks,



Javier Andrs

[Sreelekshm_S_Intel]

The root certificate hashes, not the root certificates, will be pre-intslled by the OEM. A customer must purchase root certificate issued by one of the root authorities in the FW.

Thanks,

Sree