Unable to get a Dell Precision 5510 to utilize Intel AMT (Advanced Management Technology) on the LAN

[GMadi1]

We have come across an issue with the Dell Precision 5510 with respect to utilizing Intel AMT (Advanced Management Technology) when on a wired connection. We are unable to remote provision these notebooks as we get an "on-board LAN not found" error. Please let us know how to correct this problem. These Units do not come equipped with onboard LANs. Instead they come with USB-C external NICs. The Dock is also connected using a USB-C connector.

[Dariusz_W_Intel]

Hi,

Intel AMT Remote Confgiration requires build-in (LOM) Intel AMT enabled Wired LAN adapter (one with LM at the end of its name). Intel WiFi or LAN over USB, USB-C and even WiGig Based Wireless Dock (it is still USB but with no wires) are not supported as they can't be controlled by Intel AMT FW.

Intel AMT management over Wired LAN also requires AMT enabled LAN controller (USB based ones are not AMT enabled) -so future manageability will be possible only over Intel AMT enabled WiFi adapters.

Please note that during sellecting your system configuration on Dell site you should select in Systems Management - Intel vPro™ Technology's Advanced Management Features [add $20.36] option.

Default is No Out-of-Band Systems Management which blocks all Intel AMT manageability in ME FW at manufacturing

Also if your Processor integrated Intel HD graphics is not active - Intel HW KVM redirection will not work (you will have K_M only - Discrete GfX Video can't be redirected by Intel AMT due to design limitations) but you will still get Remote HW inventory, Power Control, Serial Over LAN text redirection (incl BIOS setup) and USB-R storage boot redirection (replaces IDE-R redirection).

You have two configuration choices:

• Host Based configuration - (use ACUWizard to create your AMT settings profile and then ACUconfig with ConfigAMT command + your AMT settings XML file) to configure it from OS level.Host based Configures system into Client Control mode where User Consent code (random 6 digit code displayed on vPro PC screen that has to be provided over phone to IT to let them start redirection session) is mandatory for all Redirection operations. System Defense (HW Firewall) is not available. MEBx Password is not changed from factory default one -it stays currnet (default is "admin").
• Use 2 stage configuration: USB Local Configuration - Use ACUWizard -Tools to create USB file for Manual configuration (USB Local Configuration) - it will set Intel AMT into Admin Control mode + will change default MEBx Password.Then perform Host Based (Re-)Configuration using ACUconfig with ConfigAMT command + your AMT settings XML file with addiitonal parameter /AdminPassword "your_new_MEBxP@ssw0rd_as_set_by_USB" Which will set all other AMT parameters (+ may overwrite AMT admin password as set by USB to NewMEBx password to separate network password) Host Based Config in this case will just update AMT settings (can set AD integration, TLS and AMT WiFi settings) without changing AMT control Mode.In Admin Control Mode - Consent code is optional - AMT administrator may switch it of on the fly (Real VNC+ does it, meshcommander.com does it as well).

Please remember to set Intel AMT WiFi profiles that will match your WiFi AP setup in order to be able to mange your PC in low power states over WiFi using Intel AMT. Power supply must be connected or PC must be turned on manually by power switch button.

rgds

Dariusz Wittek

Intel EMEA Biz Client Solution Architect

[GMadi1]

Thank you Dariusz. Please Note this Dell Precision 5510 is a notebook (Mobile Precision). The Wi-Fi card is an Intel device. Are you saying the there must be a (LOM) wired LAN installed even if we are only using the Intel Wireless to provision the system?

[Dariusz_W_Intel]

If you want to configure Intel AMTdirectly from unconfigured state into Admin Control mode without need to "touch" it manually (ex. with USB) then YES - you need to have Intel AMT enabled LAN controller on board

If Host Based Configuration in to Client Control Mode (as described above) is OK for you - then you can do it over Wifi (even over VPN/3G/4G, or sending configuration package over email or web server link).

See my answer to your other sub question

rgds

Dariusz Wittek

Intel EMEA Biz Client Solution Architect