Intel® Active Management Technology Developers Guide

ID 772055
Date 1/05/2021
Public
Document Table of Contents

Configuration

When a device with Intel® Active Management Technology (Intel® AMT) is shipped, the Intel AMT firmware is in a non-configured state by default. This leaves the Intel AMT device in a state where remote management using Intel AMT features is not yet possible.

In order for a technician to remotely manage the Intel AMT device, the firmware requires two actions: network activation and a Digest User Password, at a minimum.

Additional features can also be configured but are optional. These additional advanced features are related to Active Directory* Integration, Alarm Clock, Intel AMT Events, Hardware Asset inventory, Intel® KVM technology, Remote Power Management, Storage, Redirection, System Defense, TLS, and wireless profiles.

The configuration process can be performed by 1 of 3 methods:

  • Intel® Management Engine BIOS Extension (Intel® MEBX) Menus during Boot Process: Configuration can be performed by accessing the Intel® Converged Security and Management Engine (Intel® CSME) during the boot process. The easiest way of accessing the Intel CSME is usually through the one-time boot menu, but exact methods vary by OEM and BIOS Implementation.
  • USB: This method utilizes a USB key with a special configuration file placed on the root of the drive. It is created using the Intel AMT Configuration Utility (ACUWizard.exe).
  • OS Configuration: This method will use the Windows* OS to configure the Intel AMT firmware either as a local configuration or by prompting the AMT firmware to do a remote configuration via an Intel® Setup and Configuration Software (Intel® SCS).

Additional Resources

 

*No product or component can be absolutely secure.