Intel® Active Management Technology Use Case #3: Hardware Inventory Management (Discover)

Author: Intel® Software Network
Published On: Wednesday, September 05, 2007 | Last Modified On: Thursday, August 21, 2008

Intel® Active Management Technology (Intel® AMT) improves the visibility of enterprise hardware platforms, dramatically improving the completeness of hardware inventories. Capabilities of Intel AMT help to reduce the impact of software-agent removals, powered-down machines, non-functioning operating systems, and other system failures during hardware inventories. These problems make as many as 15%-20% of all systems not visible down-the-wire at any given time. Wireless environments and laptops make this even more challenging since at any point in time, laptops may be connected over the wireless network (Mobile mode) or remotely connected to a corporate LAN via VPN (Remote mode) or may not be connected to an AC power source.

As a result, hardware inventories are more efficient to conduct, greatly assisting compliance with government regulations, as well as management of recalls, warranties, and configurations. This use case includes hardware inventory to determine the type and quantity of hardware in the environment, and the state of the hardware’s warranty.

Conventional Hardware Inventory Management Limitations

Conventional tools have traditionally been available for hardware inventory work on an in-band basis only; that is, these tools require the target system to be operational, and they fail if the platform is powered off or if the operating system is non- functional. Moreover, users can intentionally or inadvertently remove the software agents on which the tools depend.

As a result, IT organizations must traditionally depend on users to report their installed hardware, or technicians must be sent to inventory the hardware manually. No common, persistent asset ID exists, and there is no remote down-the-wire method to discover hardware inventory information for platforms that are powered off.

Using Intel® AMT to Overcome Limitations

Using a third-party hardware inventory management application that supports Intel AMT, the IT organization discovers platforms and their firmware-resident hardware information, remotely down-the-wire in the following scenarios:

  • Desktop mode – Platforms are AC powered and connected to the corporate LAN via a wired LAN via a wired LAN connection (not over VPN)
  • Mobile mode – Laptops in S0 that are on battery power or laptops on the corporate wireless network (not connected via VPN) and have access to their firmware-resident information remotely
  • Remote mode – laptops in S0/H0 that are connected to the corporate network via VPN

Intel AMT makes that possible via out-of-band (OOB) remote access to the platform's persistent, tamper-resistant asset ID and firmware-resident hardware information (as populated by the BIOS during the last successful boot). Additional information per FRU can be stored in Intel AMT’s third-party data store by the remote management application or a third-party hardware inventory client application, which can be retrieved at any time (e.g., warranty information).

By gathering this inventory information accurately, quickly, and remotely, IT can more efficiently and effectively detect configuration drift, and manage its hardware inventories, recalls, and warranties.

In case of laptops, since all of them might not be within the corporate network (Mobile mode) or connected to the corporate LAN via VPN (Remote mode) when the inventory is taken, either some manual checking might be necessary, or the inventory might span over multiple days in order to catch all laptops connected appropriately.

Key Functionality Enabled by Intel AMT that Underlies this Use Case

The following table summarizes the features and functionality utilized in this use case that are provided by Intel AMT or enabled by Intel AMT in third-party software:

Feature

Functionality

Out-of band (OOB) access

Accessing the persistent asset ID and field-replaceable unit (FRU) inventory information when the operating system is unavailable or the platform is off

Remote hardware inventory

Utilizing the existing FRU data stored in dedicated flash memory space to discover the platform's FRUs

Intel® AMT Flash

Allows BIOS to store/update hardware list in dedicated Flash memory space

Third-party tamper-resistant agent

Allows for access to the inventory information with little risk of tampering by a user


The Advantage of Intel AMT

Utilizing Intel AMT in this use case reduces or eliminates the need for manual inventory audits, making asset inventory audits faster, more accurate, and more timely. Intel AMT makes this possible through remote, down-the-wire access, assuming that the platforms are either in desktop mode (AC powered, but not necessarily turned on) and connected to the corporate network via a wired connection (not over VPN)), mobile mode (within the corporate environment on wireless or battery connected (not VPN connected), or remote mode (connected via VPN - AC or DC powered and wired or wirelessly connected) to the platform's tamper-resistant, persistent asset ID and firmware-resident field-replaceable unit (FRU) list.

Inventory accuracy is improved, regardless of the platform's operating system or power state. More accurate FRU inventory information enables better management of FRU inventories, recalls, and warranties. In addition, these benefits facilitate regulatory compliance.

Business Value of the Intel AMT Solutions

IT organizations can save substantially on hardware maintenance contracts (both platforms and hardware) by knowing which platforms require what maintenance levels (rather than covering them all with the most expensive option).

  • Hardware Inventory Management Usage Case Implementation
  • The implementation of the hardware inventory management usage case follows these steps:
    1. Regularly scheduled audit activities are initiated
    2. Audit technician uses MC to initiate a network-wide current inventory of systems
    3. MC is able to gather hostname, hardware, BIOS, FRU data from Intel AMT-enabled platforms
    4. Audit technician verifies against master inventory database and audit reports are generated

The workflow associated with this implementation is as follows:

Step

Action

API Call

1

Is this an Intel® AMT-enabled device?

GetCoreVersion()
ISVS_GetAPIVersion() or

ISVS_GetAPIVersionEx()

2

If so, perform hardware inventory management

See table below for appropriate APIs to call.

The following tables provide an overview of Hardware Inventory APIs:

GeneralInfo APIs:

The GeneralInfo APIs provides general (read only) information for various (local or network access) management applications.

Method

Description & Compatibility

GetCoreVersion()

Reads the firmware version information from the Intel AMT

Supported in Intel AMT Release 1.0 and later

GetCodeVersions()

Reads the BIOS and firmware information from the Intel AMT

Supported by Intel AMT Release 2.0 and later

GetProvisioningMode()

Gets the current provisioning mode (Enterprise or Small Business) from the Intel AMT device

Supported in Intel AMT Release 1.0 and later

GetProvisioningState()

Gets the current provisioning (configuration) state from Intel AMT

Supported by Intel AMT Release 2.0 and later

GetVlanParameters()

Gets the VLAN mode and ID used by the Intel AMT device

Supported by Intel AMT Release 1.0 and later

GetHostName()

Gets the host name currently used by the Intel AMT device

Supported by Intel AMT Release 1.0 and later

GetConfigServerInfo()

Gets Configuration Server Information from Intel AMT

Supported by Intel AMT Release 2.0 and later

GetAdminAclEntryStatus()

Reads Admin ACL entry status from Intel AMT

Supported by Intel AMT Release 2.0 and later

GetAdminNetAclEntryStatus()

Reads remote Network Admin ACL entry status from Intel AMT

Supported by Intel AMT Release 2.0 and later

GetPasswordModel()

Gets the BIOS password mode of work from Intel AMT

Supported by Intel AMT Release 2.0 and later

GetEnabledInterfaces()

Gets enabled interfaces information of Intel AMT device

Supported by Intel AMT Release 2.0 and later

GetNetworkState()

Reads Network State information from Intel AMT

Supported by Intel AMT Release 2.0 and later

GetSecurityParameters()

Reads local interface security parameters

Supported by Intel AMT Release 2.0 and later

GetIderSessionLog()

Reads the IDER session log

Supported by Intel AMT Release 2.0 and later

HardwareAsset APIs:

The HardwareAsset APIs perform operations that return hardware asset data. 

Method

Description & Compatibility

EnumerateAssetTypes()

Enumerates the names of hardware asset types supported by the Intel AMT device

Supported in Intel AMT Release 1.0 and later

GetAssetData()

Returns hardware asset data of Intel AMT device

Supported by Intel AMT Release 1.0 and later

Remote Control APIs:

The Remote Control APIs managing the power and booting state of the Intel AMT managed system. 

Method

Description & Compatibility

GetRemoteControlCapabilities()

Gets the remote control capabilities supported by the

Intel AMT device

Supported in Intel AMT Release 1.0 and later

RemoteControl()

Remotely controls the boot and power state of the Intel

AMT-managed PC

Supported by Intel AMT Release 1.0 and later

GetSystemPowerState()

Returns the power state of the Intel AMT-managed PC system

Supported by Intel AMT Release 1.0 and later

ISV Storage APIs:

The ISV storage APIs are used by ISVs to access the Intel AMT non-volatile storage feature

Method

Description & Compatibility

ISVS_GetAPIVersion()

Gets the ISVS API version supported by the Intel AMT device. (deprecated since AMT 2.0)

ISVS_GetAPIVersionEx()

Gets the ISVS API version supported by the Intel AMT device. Extended version of ISVS_GetAPIVersion.

The following SDK sample source code provides examples of Software Inventory Management:

  • GeneralInfo
  • ApiTest
  • AssetDisplay

The following SDK Documents provide further information:


§ The following assumptions underlie the analysis in this use case:

  1. BIOS recognizes attached FRUs on boot.
  2. ISVs have written software which writes to and utilizes the flash memory FRU list.
  3. All research data was gathered from US-based global IT shops.
  4. Platforms are connected to a power source (electrical outlet, battery, etc.), but the platform does not have to be powered on (Desktop mode) or are in S0 (Mobile mode) or S0/H0 (Remote mode) state and either AC or DC powered
  5. Platforms are physically connected through a working Ethernet connection to the corporate LAN and not over VPN (Desktop mode) or are connected to the corporate LAN over a wireless connection and not over VPN (Mobile mode) or connected to the corporate LAN either wired or wirelessly (Remote mode) for OOB access.
  6. Assumes a mostly wired environment or one where laptops are often wired.
  7. Not all laptops can be discovered and inventoried at one time given that some will not be in desktop, mobile or remote mode.

RESOURCES:

Post a comment If you have any questions, please contact our support team.