- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, we have SCCM 1606 and we would like to deploy Intel SCS in order to be able to remotely wake and control our clients via SCCM. I am completely new to Intel vPro / SCS so I need to understand where to start with this. I have read somewhere that all clients need to have a certificate installed and they can get this certificate from an internal PKI server (which we have). Is there a guide that covers the whole thing or can someone give me the basic steps that we need to work through to get this up and running? So far I have Installed "Intel Manageability Commander 1.0.8" on my own PC and I can see "Intel AMT Power-On" when I right click on computer device collections.
Kind regards,
Graham
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Graham,
You need:
- Select Intel AMT Configuration method that will fit your needs – via Remote Configuration Method (requires Intel AMT build-in LAN interface on each Intel vPro platform + single Remote Configuration certificate for internal domain name) or Host Based Configuration (no LAN neither certificate required but use of Redirection features will require end user to be present and provide 6 digit Consent Code over phone to IT Help Desk technican).
- For SCCM you will need to configure Intel AMT with TLS encryption and Kerberos Authentication.
- Once you prepared Intel AMT configuration setup (SCS's RCS service is required for Remote Configuration) test it on single system (with script/RDP)
- It everything works OK you can download and install https://downloadcenter.intel.com/download/26506/Intel-SCS-Add-on-for-Microsoft-System-Center-Configuration-Manager https://downloadcenter.intel.com/download/26506/Intel-SCS-Add-on-for-Microsoft-System-Center-Configuration-Manager
- Once Intel AMT is configured you can manage it with https://downloadcenter.intel.com/download/26375/Intel-Manageability-Commander https://downloadcenter.intel.com/download/26375/Intel-Manageability-Commander?
- You may also like to give a try a Intel® vPro™ Technology module for Windows* PowerShell https://downloadcenter.intel.com/download/25891/Intel-vPro-Technology-module-for-Windows-PowerShell?product=2354 https://downloadcenter.intel.com/download/25891/Intel-vPro-Technology-module-for-Windows-PowerShell?product=2354
Dariusz Wittek
Intel EMEA Biz Client Technical Sales Specialist
Link Copied
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
OK I have downloaded and started to work my way through "Intel® Setup and Configuration Software (Intel® SCS) Add-on for Microsoft* System Center Configuration Manager" which seems like a a good place to start!
I have another question regarding the client certificates: As we already using certificates to ensure HTTPS connectivity between the client and the SCCM server, will the same certificate be sufficient for the AMT or will the clients need another, separate certificate?
Can I also check that no additional server is required for SCS and that we will be able to install the add-on directly on to the SCCM server?
Thanks, Graham
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Graham,
Intel AMT TLS certificates private key & CSR are created inside Intel AMT/ME FW/HW so you will need to use separate certificates issued using standard WebServer certificate template (or its duplicate).
Keep in mind Intel AMT is HW/FW based Web Service.
MS SCCM Client may require some more usages in its certificate template (Intel SCS may probably work with SCCM Client cert template if it contains Server Authentication)
Intel® SCS Add-on for Microsoft* System Center Configuration Manager is just a helper for easier integration and has to be installed on SCCM primary site server.
Intel® SCS itself (RCS Remote Configuration server) may be installed on same server as SCCM Primary Site server (makes sense from perspective of keeping all Pc management components on same server) but does not have to.
rgds
Darek
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for your comprehensive reply Darek . That is exactly the sort of thing I was looking for.
Graham
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Graham,
You need:
- Select Intel AMT Configuration method that will fit your needs – via Remote Configuration Method (requires Intel AMT build-in LAN interface on each Intel vPro platform + single Remote Configuration certificate for internal domain name) or Host Based Configuration (no LAN neither certificate required but use of Redirection features will require end user to be present and provide 6 digit Consent Code over phone to IT Help Desk technican).
- For SCCM you will need to configure Intel AMT with TLS encryption and Kerberos Authentication.
- Once you prepared Intel AMT configuration setup (SCS's RCS service is required for Remote Configuration) test it on single system (with script/RDP)
- It everything works OK you can download and install https://downloadcenter.intel.com/download/26506/Intel-SCS-Add-on-for-Microsoft-System-Center-Configuration-Manager https://downloadcenter.intel.com/download/26506/Intel-SCS-Add-on-for-Microsoft-System-Center-Configuration-Manager
- Once Intel AMT is configured you can manage it with https://downloadcenter.intel.com/download/26375/Intel-Manageability-Commander https://downloadcenter.intel.com/download/26375/Intel-Manageability-Commander?
- You may also like to give a try a Intel® vPro™ Technology module for Windows* PowerShell https://downloadcenter.intel.com/download/25891/Intel-vPro-Technology-module-for-Windows-PowerShell?product=2354 https://downloadcenter.intel.com/download/25891/Intel-vPro-Technology-module-for-Windows-PowerShell?product=2354
Dariusz Wittek
Intel EMEA Biz Client Technical Sales Specialist

- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page