Intel® Active Management Technology Developers Guide

ID 772055
Date 1/05/2021
Document Table of Contents

Integrating Intel® AMT Configuration into a Management Console


One of the most important integration tasks for managing Intel® Active Management Technology (Intel® AMT)-enabled devices is configuration. The process of configuration is straightforward using provided tools from Intel such as ACUConfig.exe, which makes configuration easy to script and execute. The more involved part is understanding the requirements of your application and the Intel AMT features you need to enable to reach your goals with your integration project.

Determining Intel Active Management Technology Feature Support

The complexity of configuration profiles varies depending on the enabled features. The first step in integrating Intel AMT into a management console is to determine which features the console should support.

Begin by looking at configuration options within the Intel AMT Configuration Utility, where you can examine the available Intel AMT features. This tool is part of the Intel® Setup and Configuration Software (Intel® SCS) download. See the article on using the ACUWizard and creating a profile.xml file for a quick tutorial on creating a "Basic" Profile. You can find more detailed information about feature enabling within the pdf contained in the Intel SCS download. 

Once you have determined which features you want to enable, all you will need to do is decrypt the file to expose the configuration parameters by using the SCSEncryption.exe program, which is part of the Intel SCS download. Once decrypted, you can open the file in an XML viewer and see the exposed XML tags.

  • Decryption syntax:>SCSEncryption.exe Decrypt <input_filename> <password> /Output <output_filename>

Once these tags are exposed, a developer can create custom profiles files and customize them to the needs of the users and environmental requirements. 

Console Integration

The most common console integration uses host-based configuration. This method utilizes the host's OS (Windows* 7+) with a scripted configuration solution for automating the configuration process.

Automating the configuration process will vary from application to application; however, the basic requirements remain the same:

  1. Create the profile.xml file on the server.
  2. Automate the push/pull of the required files for configuration: 
    1. The “configurator” folder from the Intel SCS download
    2. The profile.xml file 
  3. From a command prompt with “Run as Administrator” privileges, run the following command: "acuconfig.exe configamt <profile.xml> /decryptionpassword <PASSWORD>"
  4. The configuration is successful if the program exits with code 0.


*No product or component can be absolutely secure.