Vpro DHCP15 option

[riwanFR]

Hi, 

Trying to set up vpro in my company, I managed to get it to work in the same LAN. Now i'm trying to set up the OOB part. 

I was reading this :

https://www.intel.com/content/www/us/en/support/articles/000087852/technologies/intel-active-management-technology-intel-amt.html

and I was wondering : Do I have to fill the DHCP15 option with my domain suffix on each network that contains a client machine ? Or I didn't get the point. 

Thank you

[vij1]

Hi riwanFR,

Thanks for your question regarding DHCP Option 15 and Intel AMT provisioning.

To clarify — yes, when provisioning Intel AMT in Admin Control Mode (ACM) over a wired LAN, DHCP Option 15 should be configured with the domain suffix that matches the domain portion of the Common Name (CN) in your AMT provisioning certificate. This ensures that the AMT firmware can correctly validate the provisioning server within the expected domain context.

However, please note:

·       This requirement is specific to wired provisioning.

·       If you're provisioning over wireless or other interfaces, DHCP Option 15 is not validated.

·       In such cases, it's recommended to set the PKI DNS Suffix directly in the MEBx firmware, which overrides the DHCP Option 15 requirement.

Best regards,

Vijay N.

Intel Customer Support Technician

[vij1]

Hello riwanFR,

I am following up on the case and would like to know if I can help you with anything else. Look forward to your response.

Regards,

Vijay N

[riwanFR]

Hello, 

Thank you for your answer. 

So the DHCP 15 option is needed only for the provisionning ? Let's say if i do the provisionning while i'm on the server's network, then move the machine in another network, i will be able to monitor the computer in ACM even if the DHCP 15 option on this network isn't configured? 

We are working with several clients and configuring DHCP15 option on each network isn't possible. But we need to get the hardware monitoring which requires ACM if my understanding is good. 

Regards, 

Riwan

[vij1]

Hi riwanFR,

Yes, the DHCP Option 15 is primarily needed during the provisioning process. Once the machine is provisioned in ACM (Admin Control Mode), it should be able to communicate and be monitored even if it is moved to another network where DHCP Option 15 is not configured. However, you need to ensure that the new network allows the necessary communication for Intel AMT, such as the required ports and protocols.

To summarize:

·       DHCP Option 15 is crucial during the provisioning phase.

·       After provisioning, as long as the new network supports the necessary communication for Intel AMT, you should be able to monitor the hardware in ACM without needing DHCP Option 15 configured on each network.

Make sure that the new network environment supports the required network settings for Intel AMT to function correctly.

Best regards,

Vijay N.

Intel Customer Support Technician.

[Suneesh · Accepted solution]

Hello riwanFR,

I am following up on the case and would like to know if I can help you with anything else. Looking forward to your response.

Regards,

Suneesh S

Intel Customer Support Technician