Intel® Active Management Technology (Intel® AMT) improves the visibility of enterprise hardware platforms, dramatically improving the completeness of hardware inventories. Capabilities of Intel AMT help to reduce the impact of software-agent removals, powered-down machines, non-functioning operating systems, and other system failures during hardware inventories. These problems make as many as 15%-20% of all systems not visible down-the-wire at any given time. Wireless environments and laptops make this even more challenging since at any point in time, laptops may be connected over the wireless network (Mobile mode) or remotely connected to a corporate LAN via VPN (Remote mode) or may not be connected to an AC power source.
As a result, hardware inventories are more efficient to conduct, greatly assisting compliance with government regulations, as well as management of recalls, warranties, and configurations. This use case includes hardware inventory to determine the type and quantity of hardware in the environment, and the state of the hardware’s warranty.
Conventional tools have traditionally been available for hardware inventory work on an in-band basis only; that is, these tools require the target system to be operational, and they fail if the platform is powered off or if the operating system is non- functional. Moreover, users can intentionally or inadvertently remove the software agents on which the tools depend.
As a result, IT organizations must traditionally depend on users to report their installed hardware, or technicians must be sent to inventory the hardware manually. No common, persistent asset ID exists, and there is no remote down-the-wire method to discover hardware inventory information for platforms that are powered off.
Using a third-party hardware inventory management application that supports Intel AMT, the IT organization discovers platforms and their firmware-resident hardware information, remotely down-the-wire in the following scenarios:
Intel AMT makes that possible via out-of-band (OOB) remote access to the platform's persistent, tamper-resistant asset ID and firmware-resident hardware information (as populated by the BIOS during the last successful boot). Additional information per FRU can be stored in Intel AMT’s third-party data store by the remote management application or a third-party hardware inventory client application, which can be retrieved at any time (e.g., warranty information).
By gathering this inventory information accurately, quickly, and remotely, IT can more efficiently and effectively detect configuration drift, and manage its hardware inventories, recalls, and warranties.
In case of laptops, since all of them might not be within the corporate network (Mobile mode) or connected to the corporate LAN via VPN (Remote mode) when the inventory is taken, either some manual checking might be necessary, or the inventory might span over multiple days in order to catch all laptops connected appropriately.
The following table summarizes the features and functionality utilized in this use case that are provided by Intel AMT or enabled by Intel AMT in third-party software:
|
Feature |
Functionality |
|
Out-of band (OOB) access |
Accessing the persistent asset ID and field-replaceable unit (FRU) inventory information when the operating system is unavailable or the platform is off |
|
Remote hardware inventory |
Utilizing the existing FRU data stored in dedicated flash memory space to discover the platform's FRUs |
|
Intel® AMT Flash |
Allows BIOS to store/update hardware list in dedicated Flash memory space |
|
Third-party tamper-resistant agent |
Allows for access to the inventory information with little risk of tampering by a user |
Utilizing Intel AMT in this use case reduces or eliminates the need for manual inventory audits, making asset inventory audits faster, more accurate, and more timely. Intel AMT makes this possible through remote, down-the-wire access, assuming that the platforms are either in desktop mode (AC powered, but not necessarily turned on) and connected to the corporate network via a wired connection (not over VPN)), mobile mode (within the corporate environment on wireless or battery connected (not VPN connected), or remote mode (connected via VPN - AC or DC powered and wired or wirelessly connected) to the platform's tamper-resistant, persistent asset ID and firmware-resident field-replaceable unit (FRU) list.
Inventory accuracy is improved, regardless of the platform's operating system or power state. More accurate FRU inventory information enables better management of FRU inventories, recalls, and warranties. In addition, these benefits facilitate regulatory compliance.
IT organizations can save substantially on hardware maintenance contracts (both platforms and hardware) by knowing which platforms require what maintenance levels (rather than covering them all with the most expensive option).
The workflow associated with this implementation is as follows:
|
Step |
Action |
API Call |
|
1 |
Is this an Intel® AMT-enabled device? |
GetCoreVersion() ISVS_GetAPIVersionEx() |
|
2 |
If so, perform hardware inventory management |
See table below for appropriate APIs to call. |
The following tables provide an overview of Hardware Inventory APIs:
GeneralInfo APIs:
The GeneralInfo APIs provides general (read only) information for various (local or network access) management applications.
|
Method |
Description & Compatibility |
|
GetCoreVersion() |
Reads the firmware version information from the Intel AMT Supported in Intel AMT Release 1.0 and later |
|
GetCodeVersions() |
Reads the BIOS and firmware information from the Intel AMT Supported by Intel AMT Release 2.0 and later |
|
GetProvisioningMode() |
Gets the current provisioning mode (Enterprise or Small Business) from the Intel AMT device Supported in Intel AMT Release 1.0 and later |
|
GetProvisioningState() |
Gets the current provisioning (configuration) state from Intel AMT Supported by Intel AMT Release 2.0 and later |
|
GetVlanParameters() |
Gets the VLAN mode and ID used by the Intel AMT device Supported by Intel AMT Release 1.0 and later |
|
GetHostName() |
Gets the host name currently used by the Intel AMT device Supported by Intel AMT Release 1.0 and later |
|
GetConfigServerInfo() |
Gets Configuration Server Information from Intel AMT Supported by Intel AMT Release 2.0 and later |
|
GetAdminAclEntryStatus() |
Reads Admin ACL entry status from Intel AMT Supported by Intel AMT Release 2.0 and later |
|
GetAdminNetAclEntryStatus() |
Reads remote Network Admin ACL entry status from Intel AMT Supported by Intel AMT Release 2.0 and later |
|
GetPasswordModel() |
Gets the BIOS password mode of work from Intel AMT Supported by Intel AMT Release 2.0 and later |
|
GetEnabledInterfaces() |
Gets enabled interfaces information of Intel AMT device Supported by Intel AMT Release 2.0 and later |
|
GetNetworkState() |
Reads Network State information from Intel AMT Supported by Intel AMT Release 2.0 and later |
|
GetSecurityParameters() |
Reads local interface security parameters Supported by Intel AMT Release 2.0 and later |
|
GetIderSessionLog() |
Reads the IDER session log Supported by Intel AMT Release 2.0 and later |
HardwareAsset APIs:
The HardwareAsset APIs perform operations that return hardware asset data.
|
Method |
Description & Compatibility |
|
EnumerateAssetTypes() |
Enumerates the names of hardware asset types supported by the Intel AMT device Supported in Intel AMT Release 1.0 and later |
|
GetAssetData() |
Returns hardware asset data of Intel AMT device Supported by Intel AMT Release 1.0 and later |
Remote Control APIs:
The Remote Control APIs managing the power and booting state of the Intel AMT managed system.
|
Method |
Description & Compatibility |
|
GetRemoteControlCapabilities() |
Gets the remote control capabilities supported by the Intel AMT device Supported in Intel AMT Release 1.0 and later |
|
RemoteControl() |
Remotely controls the boot and power state of the Intel AMT-managed PC Supported by Intel AMT Release 1.0 and later |
|
GetSystemPowerState() |
Returns the power state of the Intel AMT-managed PC system Supported by Intel AMT Release 1.0 and later |
ISV Storage APIs:
The ISV storage APIs are used by ISVs to access the Intel AMT non-volatile storage feature
|
Method |
Description & Compatibility |
|
ISVS_GetAPIVersion() |
Gets the ISVS API version supported by the Intel AMT device. (deprecated since AMT 2.0) |
|
ISVS_GetAPIVersionEx() |
Gets the ISVS API version supported by the Intel AMT device. Extended version of ISVS_GetAPIVersion. |
The following SDK sample source code provides examples of Software Inventory Management:
The following SDK Documents provide further information:
§ The following assumptions underlie the analysis in this use case:
RESOURCES: