Intel® Management and Security Status Application User's Guide
Contents
1. Information unavailable It is not known whether Intel AMT technology is supported on the system No Intel AMT information is available This can be for one of the following reasons UNS service has stopped or the MEI driver is disabled Intel Standard Manageability Enabled Disabled Information unavailable When Intel Standard Manageability status presents Enabled it means that the Intel amp Standard Manageability technology is supported on the system Intel ME status in the Advanced Tab will give the user information on whether the Intel ME is configured hence Intel AMT is functional and operating When Intel Standard Manageability status presents Disabled it means that the Intel amp Standard Manageability technology is not supported on the system Information unavailable It is not known whether Intel Standard Manageability technology is supported on the system No Intel amp Standard Manageability information is available This can be for one of the following reasons UNS service has stopped or the MEI driver is disabled Level III Manageability Upgrade Enabled Disabled Information unavailable When Level III Manageability Upgrade status presents Enabled it means that Level III Manageability Upgrade technology is supported on the system Intel ME status in the Advanced Tab will give the user information on whether the Intel ME is configured hence Level 3 Manageability Upgrade is functio2. the balloon is not displayed 4 6 Advanced Tab Click the Advanced tab to view additional information Whatis Intel Management Engine _ Intel Management Engine is an additional component that enables management and security features on your computer Intel Management Engine Status Configured Firmware Version 6 1 0 1011 Secure Output Window Settings The secure output service is intended to display messages from the Intel Management Engine to the user Message Language Message Size View details per Network Connection View more details related to the Intel amp Management Engine Learn more 4 6 1 Intel amp Management Engine The following information is provided State The operational status of Intel ME Possible values Configured Unconfigured Information unavailable e Firmware Version The Intel ME firmware version 4 6 2 Secure Output Window Settings The following information is provided for the Secure Output feature currently implemented in KVM keyboard video mouse redirection 25 26 e Message Language Specifies the language used by the Secure Output feature Choose one of the listed languages e Message Size Specifies the window size of messages displayed by the Secure Output Feature Choose one of the following Regular or Large Note If you are working in TLS mode but the local certificates are incorrect or missing the KVM and Secure output info
3. Intel AMT Terminal and keyboar 6 30 2009 2 13 29 PM Reviewed Intel AMT Terminal and keyboar 6 30 2009 2 05 56 PM Reviewed Intel AMT Terminal and keyboar 6 30 2009 2 05 41 Note No action is required on your behalf due to any of the above events J Enable user notification V Intel Management and Security Status will be available next time log on to Windows Learn more Events and some of their details are displayed in the Event History section These can be sorted by clicking on the relevant column header The status of Intel AMT Intel Standard Manageability Level 3 Manageability Upgrade Intel Anti Theft or Intel RPAT is displayed in the Service Status section depending on which technology is operational on the system The tab displays information for either Intel AMT Intel Standard Manageability or Level 3 Manageability Upgrade The status can be one of the following e Intel AMT Enabled Disabled Information unavailable When Intel AMT status presents Enabled it means that the Intel AMT technology is supported on the system Intel ME status in the Advanced Tab will give the user information on whether the Intel ME is configured hence Intel AMT is functional and operating 15 16 When Intel AMT status presents Disabled it means that the Intel AMT technology is not supported on the system or that Intel AMT is disabled in MEBx
4. following limited revocable non exclusive non assignable royalty free copyright licenses in the Software The Software may contain the software and other property of third party suppliers some of which may be identified in and licensed in accordance with the license txt file or other text or file in the Software DEVELOPER TOOLS including developer documentation installation or development utilities and other materials including documentation You may use modify and copy them internally for the purposes of using the Software as herein licensed but you may not distribute all or any portion of them RESTRICTIONS You will make reasonable efforts to discontinue use of the Software licensed hereunder upon Intel s release of an update upgrade or new version of the Software You shall not reverse assemble reverse compile or otherwise reverse engineer all or any portion of the Software Use of the Software is also subject to the following limitations You i are solely responsible to your customers for any update or support obligation or other liability which may arise from the distribution of your product s ii shall not make any statement that your product is certified or that its performance is guaranteed in any way by Intel iii shall not use Intel s name or trademarks to market your product without written permission iv shall prohibit disassembly and reverse engineering and v shall indemnify hold harmless and de
5. value you can enter here is 1 if you enter the value 0 the IMSS will load after the default period 60 seconds To cause the IMSS to load without any delay change the value of the IMSS key to C Program Files Common Files Intel Privacy Icon PrivacyIconCLient exe startup 5 5 Show Notification Option By default Enable User Notification check box in the Intel Management and Security Status General tab is checked To change the default behavior add a value named ShowNotification with value 0 to the following registry location HKLM SOFTWARE Intel PIcon Setting To return to the default behavior change the data of the same value to 0 or delete the value The user selection overrides system values in the registry key 5 6 Disabling the Intel AT Tab By default the Intel AT tab is displayed if the platform supports Intel AT To disable Intel AT on the platform assign the value 1 to the DisableAT registry key in the HKLM SOFTWARE ntel PIcon Setting registry directory If this key is missing from the registry create one with type DWORD If this is done the Intel AT tab is not displayed no new balloon notifications are displayed and no new Intel AT events are displayed in the General tab 5 7 Click here for more details link By default clicking the Click here for more details inside the Learn More dialog will direct the user to the official Intel Corporation Privacy website The link pointed t
6. 898 CSF F3B5 FE80 8605 E898 C9F F3B5 In the Connection Type section click either Wireless Connection or Wired Connection to display information on the following items for the selected interface e Link Status Whether the link is currently active Possible values are Link up Link down Information unavailable e MAC Information XX XX XX XX XX XX e g 88 88 88 0A 88 87 e IPv4 Address 27 28 ntel IPv4 Mode Possible values Static DHCP Information unavailable e IPv6 address If IPv6 addressing is enabled for the ME the IMSS displays up to 6 IPv6 IP addresses configured for an ME network interface e Configured for Wireless appears only for wireless connection Possible values are Wireless enabled Wireless disabled Information unavailable 4 7 Exiting the Application To exit the application right click on the Intel Management and Security Status Application icon in the notification area and select Exit The following window is displayed Would you like the Intel Management and Security Status icon to be available next time you log on to Windows Click Yes to automatically start the Intel Management and Security Status application when you next log on 5 Advanced Configuration 5 1 General tab logo The logo displayed in the general tab can be substituted in order to match the visual identity of the computer supplier For example a particular manufacturer may prefer to display the
7. ENT OR FITNESS FOR A PARTICULAR PURPOSE Intel or its suppliers do not warrant or assume responsibility for the accuracy or completeness of any information text graphics links or other items contained in the Software LIMITATION OF LIABILITY IN NO EVENT SHALL INTEL OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING WITHOUT LIMITATION LOST PROFITS BUSINESS INTERRUPTION OR LOST INFORMATION ARISING OUT OF THE USE OF OR INABILITY TO USE THE SOFTWARE EVEN IF INTEL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES SOME JURISDICTIONS PROHIBIT EXCLUSION OR LIMITATION OF LIABILITY FOR IMPLIED WARRANTIES OR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE ABOVE LIMITATION MAY NOT APPLY TO YOU YOU MAY ALSO HAVE OTHER LEGAL RIGHTS THAT VARY FROM JURISDICTION TO JURISDICTION Contents 1 TAEFOCUCU OM UR 6 2 System Requiretrients disc cate sia edd deena chan 7 3 TASC ANAT P m 8 3 1 Installing Microsoft NET Framework 3 5 8 3 2 Installing all SW a 8 4 Using the Intel Management and Security Status Application and Icon 14 4 1 erc PT 15 42 Intel AMT 18 4 2 1 Fast Call fo
8. Intel Management and Security Status Application User s Guide April 2010 Document Revision Version 0 91 Firmware version 6 1 x INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL PRODUCTS NO LICENSE EXPRESS OR IMPLIED BY ESTOPPEL OR OTHERWISE TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT EXCEPT AS PROVIDED IN INTEL S TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS INTEL ASSUMES NO LIABILITY WHATSOEVER AND INTEL DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY RELATING TO SALE AND OR USE OF INTEL PRODUCTS INCLUDING LIABILITY OR WARRANTIES RELATING TO FITNESS FOR A PARTICULAR PURPOSE MERCHANTABILITY OR INFRINGEMENT OF ANY PATENT COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT UNLESS OTHERWISE AGREED IN WRITING BY INTEL THE INTEL PRODUCTS ARE NOT DESIGNED NOR INTENDED FOR ANY APPLICATION IN WHICH THE FAILURE OF THE INTEL PRODUCT COULD CREATE A SITUATION WHERE PERSONAL INJURY OR DEATH MAY OCCUR Intel may make changes to specifications and product descriptions at any time without notice Designers must not rely on the absence or characteristics of any features or instructions marked reserved or undefined Intel reserves these for future definition and shall have no responsibility whatsoever for conflicts or incompatibilities arising from future changes to them The information here is subject to change without notice Do not finalize a design with this information The products described in this do
9. Manageability Upgrade Intel Anti Theft Intel Remote PC Assist Intel RPAT services The Intel Management and Security Status icon indicates whether Intel AMT Intel Standard Manageability Intel RPAT Level III Manageability Upgrade and Intel Anti Theft are running on the platform The icon is located in the notification area By default each time Windows starts Intel Management and Security Status starts and the notification icon is displayed The Intel Management and Security Status application has a separate version per every Intel AMT generation 4 x 5 x 6 x This User Guide describes the Intel Management and Security Status application for Intel AMT generation 6 x Note Ifthe Intel Management and Security Status application starts automatically as a result of the user logging on to Windows the icon will be loaded to the notification area only if Intel AMT Intel RPAT Level III Manageability Upgrade or Intel amp Standard Manageability is enabled on the platform If the Intel Management and Security Status application is started manually via the Start menu the icon is loaded even if none of these technologies is enabled as long as all the drivers have been installed Note The information displayed in the Intel Management and Security Status is not shown in real time The data is refreshed at different intervals 2 intel System Requirements To enable installation and use of the Intel Man
10. agement and Security Status Application the following are required on the platform Intel 5 Series Express Chipset with Intel AMT Intel Remote PC Assist Intel Standard Manageability or Level 3 Manageability Upgrade Windows XP Windows Vista Windows 7 32 64 bit versions Microsoft NET Framework 2 0 or 3 5 version 3 5 is preferred The Intel MEI driver User Notification Service UNS Local Manageability Service LMS Note For Intel AMT versions 6 0 and 6 1 there is a bundled installation package for the following components Intel Management and Security Status Application Intel MEI driver LMS UNS and SOL driver Please see the Bring up User Guide for more information ntel 3 Installation The Intel Management and Security Status Application is automatically installed with the Management Engine components The installation process consists of two steps Installing the Microsoft NET framework a requirement for running the software and installing the status application The order of the steps is imperative always install the framework before the Intel AMT applications 3 1 Installing Microsoft NET Framework 3 5 Download Microsoft NET Framework 3 5 dotnetfx35 exe from Microsoft s website One link to the installer application is http download microsoft com download 6 0 f 60fc5854 3cb8 4892 b6db bd4f42510f28 dotnetfx35 exe Installing the version available in that
11. company s logo To change the logo add a bitmap file called oemlogo bmp to the Intel Management and Security Status folder located at Program Files Intel Intel Management Engine Components IMSS The default logo will appear if the bitmap file is invalid or absent Note The bitmap dimensions must be 62 width by 48 height or at the same proportions as 62 X 48 This is because the logo will be resized to match the logo size in the general tab 5 2 Load Start Up options By default Intel Management and Security Status loads on Windows startup A user can uncheck the Intel Management and Security Status will be available next time I log on to Windows check box to prevent it from happening 1 To disable application load on startup for all users add a value named AppAutoStartDefaultVal with value O to the following registry location HKLM SOFTWARE Intel PIcon Setting 2 To return to the default behavior change the data of the same value to 1 or delete the value Note The application will still be available from the Start Menu regardless of the value in this registry key Note The user selection overrides system values in the registry key 5 3 Load in disabled state By default Intel Management and Security Status will not load in case all ME technologies are disabled or required component is not functioning referred as disabled state in the following sections To enable application load in d
12. cted Terminal and Keyboard Redirection Disconnected System Defense Status Not activated Learn more 4 3 1 Support Session Status Section The following information is provided Media Redirection Indicates whether there are any open IDE redirection sessions Possible values Connected Disconnected Information unavailable e Terminal and Keyboard Redirection Indicates whether there are any open terminal keyboard redirection sessions Possible values Connected Disconnected Information unavailable 4 3 2 System Defense State e System Defense State Indicates whether System Defense policies are currently active Possible values Activated Not activated Information unavailable 4 4 L3 Mgt Upgrade Tab Note This tab is displayed only if the platform supports Level III Manageability Upgrade Click the L3 Mgt Upgrade tab to display Level III Manageability Upgrade information Whatis L3 Mgt Upgrade Level Ill Manageability Upgrade allows IT professionals to remotely discover heal and protect networked computing assets Fast Call for Help Connection Status Disconnected Get Technical Help Intel amp AMT detected that you are disconnected from the organization network Clicking this button will connect you to IT Support session status Media Redirection x Disconnected Terminal and Keyboard Redirection E Disconnected System Defense Status X Not activated Learn more 4 4 1 Fast Call fo
13. cument may contain design defects or errors known as errata which may cause the product to deviate from published specifications Current characterized errata are available on request Contact your local Intel sales office or your distributor to obtain the latest specifications and before placing your product order All products platforms dates and figures specified are preliminary based on current expectations and are subject to change without notice All dates specified are target dates are provided for planning purposes only and are subject to change This document contains information on products in the design phase of development Do not finalize a design with this information Revised information will be published when the product is available Verify with your local sales office that you have the latest datasheet before finalizing a design Intel Active Management Technology requires the computer system to have an Intel AMT enabled chipset network hardware and software as well as connection with a power source and a corporate network connection Setup requires configuration by the purchaser and may require scripting with the management console or further integration into existing security frameworks to enable certain functionality It may also require modifications of implementation of new business processes With regard to notebooks Intel AMT may not be available or certain capabilities may be limited over a host OS based VPN or when conn
14. details contact your hardware vendor Intel amp Management and Security Status will be available next time I log on to Windows Checking this box causes the Intel Management and Security Status Application to be invoked and the icon to be displayed whenever you log on to Windows Note The application does not load automatically with Windows log on if none of the technologies it displays Intel AMT Intel Standard Manageability Intel Anti Theft Level III Manageability Upgrade or Intel RPAT is enabled on the platform Enable user notification This option will allow the user to enable or disable Intel Management and Security Status icon from displaying important notifications in the notification area for instance notification will be sent when one of the technologies is enabled or disabled 17 18 4 2 Intel AMT Tab Note This tab is displayed only if the platform supports Intel AMT Click the Intel AMT tab to display Intel AMT information Whatis Intel AMT Intel Active Management Technology allows IT professionals to remotely discover heal and protect your networked computer Fast Call for Help Connection Status 19 Connected Get Technical Help Intel AMT detected that you are connected to the organization network Click this button to notify T that you need support Support session status Remote Conitrol Connection 38 Disconnected E Media Redirection Discon
15. e FW will be presented normally without any dependence in the client certificate 6 3 Information Unavailable is displayed instead of technology status The Intel Management and Security Status icon relies on the User Notification Service which is installed together with the Intel Management and Security Status to obtain information concerning the status of the resident technologies Please make sure that 1 The User Notification Service is running and started automatically on Windows startup If it is not installed please reinstall the drivers according to section 3 2 The Local Manageability Service LMS is running and started automatically on Windows startup If it is not installed please reinstall the drivers according to section 3 3 The Intel MEI driver is installed enabled and functioning properly Please review the Bring up Guide document for more information concerning this driver 6 4 Client Initiated Remote Access Connection failure Failure to connect to the Information Technology network can be caused by the following 1 The User Notification Service is not running It can be started through the Services pane in the Computer Management window If it is not installed please reinstall the drivers according to section 3 2 The network cable is disconnected or the network connection is not configured properly If the actions above don t resolve the problem it is recommended to contact your I
16. ecting wirelessly on battery power sleeping hibernating or powered off For more information see www intel com technology platform technology intel amt Systems using Client Initiated Remote Access CIRA require wired LAN connectivity and may not be available in public hot spots or click to accept locations For more information on CIRA visit http www intel com products centrino2 vpro index htm Code names featured are used internally within Intel to identify products that are in development and not yet publicly announced for release Customers licensees and other third parties are not authorized by Intel to use code names in advertising promotion or marketing of any product or services and any such use of Intel s internal code names is at the sole risk of the user Intel and the Intel logo are trademarks of Intel Corporation in the U S and other countries Other names and brands may be claimed as the property of others Copyright 2009 2010 Intel Corporation All rights reserved intel IMPORTANT READ BEFORE COPYING INSTALLING OR USING Do not use or load this software or any associated materials collectively the Software until you have carefully read the following terms and conditions By loading or using the Software you agree to the terms of this Agreement If you do not wish to so agree do not install or use the Software LICENSE Subject to the restrictions below Intel Corporation Intel grants you the
17. fend Intel and its suppliers from and against any claims or lawsuits including attorney s fees that arise or result from your distribution of any product OWNERSHIP OF SOFTWARE AND COPYRIGHTS Title to all copies of the Software remains with Intel or its suppliers The Software is copyrighted and protected by the laws of the United States and other countries and international treaty provisions You will not remove alter deface or obscure any copyright notices in the Software Intel may make changes to the Software or to items referenced therein at any time without notice but is not obligated to support or update the Software Except as otherwise expressly provided Intel grants no express or implied right under Intel patents copyrights trademarks or other intellectual property rights You may transfer the Software only if the recipient agrees to be fully bound by these terms and if you retain no copies of the Software LIMITED MEDIA WARRANTY 1f the Software has been delivered by Intel on physical media Intel warrants the media to be free from material physical defects for a period of ninety 90 days after delivery by Intel If such a defect is found return the media to Intel for replacement or alternate delivery of the Software as Intel may select EXCLUSION OF OTHER WARRANTIES EXCEPT AS PROVIDED ABOVE THE SOFTWARE IS PROVIDED AS IS WITHOUT ANY EXPRESS OR IMPLIED WARRANTY OF ANY KIND INCLUDING WARRANTIES OF MERCHANTABILITY NONINFRINGEM
18. g Click Next to continue lt Back Cancel Intel Installation Framework 10 2 Click Next The License window opens Intel Management Engine Components Intel Management Engine Components License Agreement You must accept all of the terms of the license agreement in order to continue the setup program Do you accept the terms INTEL SOFTWARE LICENSE AGREEMENT Alpha Beta Organizational Use IMPORTANT READ BEFORE COPYING INSTALLING OR USING Do not use or load this software and any associated materials collectively the Software until you have carefully read the following terms and conditions By loading or using the Software you agree to the terms of this Agreement IF you do not wish to so agree do not install or use the Software The Software contains pre release alpha or beta code which may not be fully Functional and which Intel Corporation Intel may substantially modify in producing any Final version of the Software Intel can provide no assurance that it will ever produce or make generally x Intel Installation Framework ntel 3 Read the license conditions and click Yes to accept them A Readme file displays system requirements and other information about the application Intel Management Engine Components Intel Management Engine Components Readme File Information Refer to the Readme file below to view the system requirements and installation
19. her there are any open terminal keyboard redirection sessions Possible values Connected Disconnected Information unavailable 4 4 3 System Defense State e System Defense State Indicates whether System Defense is currently active Possible values Activated Not activated Information unavailable 4 5 Intel AT Tab Note This tab is displayed only if the platform supports Intel AT Click the Intel AT tab to view Intel Anti Theft information Note The information in this tab shows the state of the platform when the Intel Management and Security Status application was last launched Intel AMT Whatis Intel AT Your new computer s hardware includes Intel Anti Theft Technology an embedded security feature that can help protect your computer from theft If the feature is enabled local intelligence in the hardware may detect a theft situation and can prevent the operating system from booting even if the operating system is reinstalled Intel AT is enabled by purchasing an Intel AT enabled laptop protection service Click here for more information about Intel Anti Theft Technology Intel AT State Status Not enrolled Intel AT Registration _ You can enjoy the benefits and security of Intel Anti Theft Technology by contacting an authorized service provider and enrolling with their Intel AT enabled service Click here for a list of Intel AT service providers v Enable prompt to e
20. information kp eoe peo poe peo peo a oe eo egeo oR Copyright 2005 2009 Intel Corporation Intel R Active Management Technology Intel R Management Engine Components Local Manageability Service Serial Over LAN oko EE RE EE RE Local Manageability Service LMS This service enables local applications running on Intel R Active Management Technology Intel R AMT device lt Back Cancel Intel Installation Framework 11 12 4 Read the information in the Readme file and click Next The installation begins displaying its progress in the window Intel Management Engine Components Intel Management Engine Components Setup Progress Please wait while the following setup operations are performed Copying File C Program Files x86 Intel Intel R Management Engine Components MEWMIPr Copying File C Program Files x86 Intel Intel R Management Engine Components MEWMIPr Copying File C Program Files x86 Intel Intel R Management Engine Components MEWMIPr Copying File C Program Files x86 Intel Intel R Management Engine Components MEWMIPr Copying File C Program Files x86 Intel Intel R Management Engine Components MEWMIPr Copying File C Program Files x86 Intel Intel R Management Engine Components MEWMIPr Creating Process mofcomp exe b Creating Process mofcomp exe Creating Process regsvr32 exe Instal
21. isabled state add a value named AutoStartInDisabled with value 1 to the following registry location HKLM SOFTWARE Intel PIcon Setting 29 30 ntel To return to the default behavior change the data of the same value to 0 or delete the value Note The application will still be available from the Start Menu regardless of the value in this registry key Note The user selection overrides system values in the registry key Meaning that in case the user will uncheck the Intel Management and Security Status will be available next time I log on to Windows check box the application will not load in disabled state 5 4 Specifying the Delay Before the IMSS Loads By default the IMSS starts loading 60 seconds after the user logs on If you need the IMSS to load later because of other applications loading at log on time you can increase this period by changing the value of the IMSS registry key in the HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Run branch this branch is correct for 32 bit operating systems for 64 bit operating systems the location of the key in the registry is HKEY_LOCAL_MACHINE SOFTWARE Wow6432Node Microsoft Windows Current Version Run The maximum allowed delay is 180 seconds For example to cause a delay of 90 seconds before the IMSS loads change the key s value to the following IMSS C Program Files Common Files Intel Privacy Icon PlconStartup exe 90 Note The lowest
22. ling Intel Control Center Intel amp Installation Framework Click Next to continue intel 5 When the installation is complete click Next in the Setup Progress window and click Finish in the Setup is Complete window Intel amp Management Engine Components Management Engine Components Setup Is Complete The setup program successfully installed the Following components Intel Management Engine Interface Serial Over LAM Intel Management and Security Status Local Management Service User Notification Service Click Finish to complete the setup process Intel Installation Framework 13 14 4 Using the Intel Management and Security Status Application and Icon Whenever either Intel AMT Intel RPAT Intel Standard Manageability or Level III Manageability Upgrade is enabled Intel Management and Security Status icon is loaded into the notification area when Windows starts It can also be started by clicking Start All Programs Intel Intel Management and Security Status Intel Management and Security Status While the Intel Management and Security Status is running the Intel Management and Security Status icon is visible in the notification area This icon will appear blue if any one of the aforementioned technologies is enabled on the computer In any other case the icon will appear gray Note The icon will also be gray if the UNS service is not running or the MEI driver i
23. location ensures that you are using the latest version required by the software package The downloading process may take several minutes Double click the downloaded application The installer extracts the contents and displays the Supplemental License Terms screen Read the license content and select the Accept option to proceed with the installation 4 When the installer finishes press the Finish button 3 2 Installing all SW components The installer Setup exe is located in the firmware kit at Drivers MEI_SOLInstaller and in the zip file at Drivers ME_IS for the InstallShield version Note The location and name of the installation program may be different depending on the OEM s choice 1 Double click the installer to install the following components Note The location and name of the installation program may be different depending on the OEM s choice a Intel amp MEI b SOL driver c Local Manageability Service LMS d User Notification Service UNS e Intel Management and Security Status Application As a result the Welcome window opens Intel Management Engine Components Welcome to the Setup Program This setup program will install the Following components Intel Management Engine Interface Serial Over LAN Intel Management and Security Status Local Management Service User Notification Service It is strongly recommended that you exit all programs before continuin
24. nal and operating When Level 3 Manageability Upgrade status presents Disabled it means that the Level 3 Manageability Upgrade technology is not supported on the system or that Level 3 Manageability Upgrade is disabled in MEBx Information unavailable It is not known whether Level 3 Manageability Upgrade technology is supported on the system No Level 3 Manageability Upgrade information is available This can be for one of the following reasons UNS service has stopped or the MEI driver is disabled Intel Anti Theft Enabled This means that the Intel Anti Theft feature is supported on the platform note that the feature becomes activated only after the platform has been enrolled with an Intel Anti Theft service provider If Intel Anti Theft is not supported on the platform no reference to it is displayed Note The information in this field shows the state of the platform when the Intel Management and Security Status application was last launched Intel RPAT Enabled Disabled Not Supported Information unavailable When Intel RPAT status shows Enabled it means that that you can register with the Intel RPAT service provider When Intel RPAT status shows Disabled it means that Intel AMT technology is active on the platform allowing your IT personnel to remotely discover heal and protect your computer When Intel RPAT status shows Not Supported it means that your computer is not Intel RPAT capable For
25. nected Terminal and Keyboard Redirection 8 Disconnected System Defense Status X Not activated Learn more 4 2 1 Fast Call for Help The Fast Call for Help section provides CILA Client Initiated Local Access or CIRA Client Initiated Remote Access capabilities depending on whether the system is connected to the corporate network or not respectively CIRA allows a user to connect the Intel AMT system to the company s Information Technology network from an external internet connection Click the Get Technical Help button to connect to your Information Technology network for system intel diagnostics and maintenance The current connection status is displayed in this section as well CILA Client Initiated Local Access feature allows a user connected to the internal corporate network to send a support request to the IT administrator Note The information displayed in the Intel Management and Security Status including the Fast Call for Help section is not shown in real time The data is refreshed every time an event has arrived Note When the user is connected as Guest account in Windows the Fast Call For Help section will be grayed out This was designed to prevent users outside of the organization to influence the organization network 4 2 2 Support Session Status Section The following information is provided e Remote Control Connection Indicates whether there is any open KVM Keyboard Video amp Mo
26. nformation Technology department 33
27. nroll with Intel Anti Theft Service Learn more Clicking the link in the What is Intel AT section connects you to an Intel site that provides you with information about Intel Anti Theft technology 4 5 1 Intel AT State Provides the following information Enrolled The platform has been enrolled with a service provider that is providing Intel Anti Theft protection for it Not Enrolled The platform has not been enrolled with a service provider that is providing Intel Anti Theft protection 23 24 Stolen The Intel Anti Theft service provider has determined that the platform has been stolen and has activated Intel Anti Theft to disable the platform In this case the following message is displayed Intel AT State Warning A Intel Anti Theft Technology has detected a theft condition on your computer and is disabling it 4 5 2 Intel AT Registration Note This section is displayed only if the platform has not been enrolled with a service provider that is providing Intel Anti Theft protection Clicking the link in this section displays a list of Intel AT service providers in your area and allows you to enroll with their Intel AT service Enable prompt to enroll with Intel Anti Theft Service If this box is checked a balloon displaying an invitation to enroll with Intel AT service is displayed every 5 time that the IMSS is started If the platform has been enrolled with Intel AT service
28. o by the Click here for more details text inside the Learn more dialog can be modified to point to a page of the manufacturer s choice To perform this change add a value named HelpURL with the URL of your choice e g http www intel com to the HKLM SOFTWARE Intel PIcon Setting key in the registry To return to the default behavior simply delete the value 31 32 6 Troubleshooting Intel Management and Security Status 6 1 Error message appears upon application load NET applications fail when executed in an environment that has no NET framework installed Microsoft does not provide a safeguard mechanism in such conditions The Intel Management and Security Status will display the following error message if no NET framework is present in the system Please install Microsoft NET Framework 3 5 and then re open the application PrivacylconClient exe Application Error o The application Failed to initialize properly 0000135 Click on OK to terminate the application 6 2 Working with Mutual authentication on the local interface When an IT organization or the user has chosen to work with Mutual authentication on the local interface they must set valid client certificate in the right directory for some commands to be sent to the FW for example 1 Stop Session in the Support session status in the Intel AMT tab 2 Secure output window settings in the Advanced tab All events from th
29. qa a Gg Ra Ya renee 28 5 Advanced CONPIQUPATION 29 5 1 General tab EET 29 5 2 Load on Start Up 29 5 3 Load in disabled state iiie Ga Gg Va Y rena 29 5 4 Specifying the Delay Before the IMSS 5 30 5 5 Show Notification sa nasse se ku sa sa sepa dade pesa ha P3 P Ra 30 5 6 Disabling the Intel AT ce ka nana nana dn oras nnne n ERE RP 31 5 7 Click here for more details eee eee me 31 6 Troubleshooting Intel Management and Security amp 32 6 1 Error message appears upon application load 32 6 2 Working with Mutual authentication on the local interface 32 6 3 Information Unavailable is displayed instead of technology status 33 6 4 Client Initiated Remote Access Connection failure 33 ntel 1 Introduction This guide describes how to install and use the Intel Management and Security Status Application an application that displays information about a platform s Intel Active Management Technology Intel AMT Intel Standard Manageability Level III
30. r Paare hiec 18 4 2 2 Support Session Status Section 19 4 2 3 System Defense State i ccccececsescetenececetanceaesssesereseensebeavasdeneetense 19 4 3 Intel Std Mgt 20 4 3 1 Support Session Status Section 20 4 3 2 System Defense State cise 21 4 4 L3 Mgt Upgrade iene 21 4 4 1 Fast Call for Help crine nexa ext Re 21 4 4 2 Support Session Status Section 22 4 4 3 System Defense 5 22 4 5 MEIDAT TaD E E 23 4 5 1 Intel AT State eene aqu les uiid R 23 4 5 2 Intel Registration nena earn nt Rana da E Pra ERR ERE dn 24 4 6 Advanced qose suae sa dn a PR a 25 4 6 1 Intel Management Engine 25 4 6 2 Secure Output Window Settings 25 4 6 3 Extended System 26 4 6 4 Network InforrmatiOn s uisu shed e aaa 27 4 7 Exiting the Application
31. r Help The Fast Call for Help section provides CILA Client Initiated Local Access or CIRA Client Initiated Remote Access capabilities depending on whether the system is connected to the corporate network or not respectively CIRA allows a user to connect the Level III Manageability Upgrade system to the company s Information Technology network from an external internet connection 21 22 ntel Click the Get Technical Help button to connect to your Information Technology network for system diagnostics and maintenance The current connection status is displayed in this section as well CILA Client Initiated Local Access feature allows a user connected to the internal corporate network to send a support request to the IT administrator Note The information displayed in the Intel Management and Security Status including the Fast Call for Help section is not shown in real time The data is refreshed every time an event has arrived Note When the user is connected as Guest account in Windows the Fast Call For Help section will be grayed out This was designed to prevent users outside of the organization to influence the organization network 4 4 2 Support Session Status Section The following information is provided e Media Redirection Indicates whether there are any open IDE redirection sessions Possible values Connected Disconnected Information unavailable e Terminal and Keyboard Redirection Indicates whet
32. rmation displayed by the IMSS is not up to date and the secure output configuration cannot be changed 4 6 3 Extended System Details When you click Extended System Details the following information is displayed Extended System Details Intel MEI Driver 6 0 0 1179 LMS 6 1 0 1012 Power Policy Mobile ON in S0 ME Wake in 53 54 5 AC only Last Intel ME Reset Reason Power Up System UUID 30110000 9021 0000 1130 219000001 130 Intel MEI Driver The version of the Intel Manageability Engine Interface driver LMS The version of the LMS service Power Policy The power modes in which the Manageability Engine is available States are ON in SO or any other power policy supported by the system Last Intel ME Reset Reason Displays the reason that the Intel ME was last reset Possible values Global System FW reset Power Up Unknown cause Information unavailable e System UUID The current System Unique Universal Identification Standard System UUID presentation such as 03000200 0400 0500 0006 000700080009 4 6 4 Network Information Click the Network Information button to display network details regarding Intel ME wireless and wired connectivity Network Information NIE t Intel Management Engine Connection Type MAC Information 00 00 11 30 21 90 IP Information IPv4 Address 10 3 11 100 IPv4 Mode DHCP IPv6 Address 1234 1111 8605 E898 CSF F3B5 1234 1111 1111 8605 E
33. s disabled or unavailable To view the Intel Management and Security Status Application Double click the Intel Management and Security Status icon or e Right click or left click the icon and choose Open or Click Start All Programs Intel Intel Management and Security Status Intel Management and Security Status Note if your computer is set to Classic start menu path will start with Programs instead of All Programs In addition settings presented above are the default in case the user has changed the location during installation the path will be different The following sections describe the information available in the application s tabs Information about the application is available also by clicking either the Learn more button or link 4 1 General Tab The General tab provides basic information about the Intel AMT Intel Standard Manageability Level 3 Manageability Upgrade Intel Anti Theft and Intel RPAT status and events Monitor the status of management and security technologies provided by Intel Engine Intel ME using Intel Management Engine Interface Intel Service Status Intel Active Management Technology Intel AMT Intel Remote PC Assist Technology Intel Intel Anti Theft Technology Intel AT Event History Comment Application Event Time Reviewed Intel AMT Terminal and keyboar 6 30 2009 2 13 33 PM Reviewed
34. use Remote Control session Connected Disconnected Information unavailable Note When using server or mutual authentication information is displayed only if a certificate exists Click the Stop Session button to close an open Remote control session e Disconnection hot key Indicates what is the hot key used to close an open KVM Keyboard Video Mouse Remote Control session default is Shift Esc Click on the Change button to choose a different hot key for terminating an open KVM Remote control session e Media Redirection Indicates whether there are any open IDE redirection sessions Possible values Connected Disconnected Information unavailable Terminal Keyboard Redirection Indicates whether there are any open terminal keyboard redirection sessions Possible values Connected Disconnected Information unavailable 4 2 3 System Defense State e System Defense State Indicates whether System Defense policies are currently active Possible values Activated Not activated Information unavailable 19 20 4 3 Intel Std Mgt Tab Note This tab is displayed only if the platform supports Intel Standard Manageability Click the Intel Std Mgt tab to display Intel Standard Manageability information Whatis Intel Std Mat Intel Standard Manageability allows IT professionals to remotely discover heal and protect networked computing assets Support session status Media Redirection Disconne
Download Pdf Manuals
Related Search