Intel (R) AMT Configuration Utility Release Notes

Download as pdf or txt
Download as pdf or txt
You are on page 1of 7

Intel® AMT Configuration Utility

Release Notes

Version 11.2

Document Release Date: September 14, 2017


License
Intel® Setup and Configuration Software (Intel® SCS) is furnished under license and may only be used or
copied in accordance with the terms of that license. For more information, refer to the “Exhibit A” section of the
“Intel(R) SCS License Agreement.rtf”, located in the Licenses folder.

Legal Information
No license (express or implied, by estoppel or otherwise) to any intellectual property rights is granted by this
document.
Intel disclaims all express and implied warranties, including without limitation, the implied warranties of
merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from
course of performance, course of dealing, or usage in trade.
The products described may contain design defects or errors known as errata which may cause the product to
deviate from published specifications. Current characterized errata are available on request.
Intel technologies may require enabled hardware, specific software, or services activation. Check with your
system manufacturer or retailer.
Intel technologies’ features and benefits depend on system configuration and may require enabled hardware,
software or service activation. Performance varies depending on system configuration.
No computer system can be absolutely secure. Intel does not assume any liability for lost or stolen data or
systems or any damages resulting from such losses.
Intel® AMT should be used by a knowledgeable IT administrator and requires enabled systems, software,
activation, and connection to a corporate network. Intel AMT functionality on mobile systems may be limited in
some situations. Your results will depend on your specific implementation.
Learn more by visiting Intel® Active Management Technology.
Intel® vPro™ Technology requires setup and activation by a knowledgeable IT administrator. Availability of
features and results will depend upon the setup and configuration of your hardware, software and IT
environment. Learn more at http://www.intel.com/technology/vpro.
KVM Remote Control (Keyboard, Video, Mouse) is only available with Intel® Core™ i5 vPro™ and Core™ i7
vPro™ processors with integrated graphics and Intel® Active Management technology activated. Discrete
graphics are not supported.
Intel, Intel vPro, and the Intel logo, are trademarks of Intel Corporation in the U.S. and/or other countries.
Microsoft, Windows, and the Windows logo are trademarks, or registered trademarks of Microsoft Corporation in
the U.S. and/or other countries.
* Other names and brands may be claimed as the property of others.
© 2017 Intel Corporation

Intel® AMT Configuration Utility – Release Notes 2


Table of Contents
1 Introduction 4
1.1 Intel SCS Components 4
1.2 Supported Operating Systems 5
1.3 Additional Requirements 5

2 New Features 6
2.1 Support for Intel AMT 11.6 6
2.2 Changes to Intel SCS Configurator (ACUConfig) 6

3 Known Issues 7

Intel® AMT Configuration Utility – Release Notes 3


1 Introduction

1 Introduction
This document describes new features and changes made in version 11.2 of the Intel® Setup and
Configuration Software (Intel® SCS).

1.1 Intel SCS Components


Intel SCS is a collection of software components and utilities developed by Intel. You can use Intel SCS to
discover, configure, and maintain Intel products and capabilities on the platforms in your network. Intel SCS
includes these components:
• Configurator – The Configurator (ACUConfig.exe) is used to configure Intel AMT (only) and runs
locally on each Intel AMT system. You can use the Configurator to configure the system locally or send a
configuration request to the RCS.
• Intel AMT Configuration Utility – This utility (ACUWizard.exe) is a wizard that you can use to
quickly configure individual systems or create XML profiles for host-based configuration using the
Configurator. This utility does not interface with the RCS and cannot be used to send requests or data to
the RCS.
• Remote Configuration Service (RCS) – The RCS is a Windows* based service that runs on a
computer in the network. The RCS can process configuration requests sent by the other Intel SCS
components. The RCS is not included in this download. For more information, refer to the
documentation in the Intel SCS download at http://www.intel.com/go/SCS.
• Console – The Console is the user interface to the RCS. You can use the Console to create and edit
configuration profiles for supported Intel products and capabilities. In database mode, the Console
includes additional options for Intel AMT. These options include monitoring Intel AMT systems and
creating and running “Jobs” on multiple Intel AMT systems.
• Remote Configuration Service Utility – The RCS Utility (RCSUtils.exe) is used to do some of the
tasks necessary when installing the RCS.
• Discovery Utility – The Discovery Utility (SCSDiscovery.exe) can be used to get detailed data about
Intel AMT (only). This utility does not interface with the RCS. (The Configurator CLI includes a
SystemDiscovery command that does interface with the RCS.)
• Solutions Framework – The Solutions Framework extends the capability of Intel SCS to discover and
configure other Intel products in addition to Intel AMT. For more information, refer to the documentation
in the Solutions Framework download at http://www.intel.com/go/SCS.

• Platform Discovery Utility – The Platform Discovery Utility (PlatformDiscovery.exe) is used to


“discover” which Intel products and capabilities exist on your platforms. For more information, refer to
the documentation in the Platform Discovery download at http://www.intel.com/go/SCS.

• Database Tool – The Database Tool (DatabaseTool.exe) is used to do some of the tasks necessary
when installing the RCS in database mode. For example, creating the Intel SCS database.
• Encryption Utility – The Encryption Utility (SCSEncryption.exe) is used to encrypt/decrypt XML
files used by Intel SCS.

Intel® AMT Configuration Utility – Release Notes 4


1 Introduction

1.2 Supported Operating Systems


This table describes the operating systems on which the main Intel SCS components of this release can run.

Version Configurator RCS Console

Windows* 10 Pro Yes No No

Windows 10 Enterprise Yes No No

Windows 8.1 Pro Yes No No

Windows 8.1 Enterprise Yes No No

Windows 7 Professional (SP1) Yes Yes Yes

Windows 7 Enterprise (SP1) Yes Yes Yes

Windows Server* 2016 No Yes Yes

Windows Server 2012 R2 No Yes Yes

Windows Server 2012 No Yes Yes

Windows Server 2008 R2 (SP2) No Yes Yes

Windows Server 2008 (SP2) No Yes Yes

* Other names and brands may be claimed as the property of others.

1.3 Additional Requirements


• The Console requires version 3.5 of Microsoft .NET Framework* (SP1) to be installed on the computer.
This is also a requirement of the wizard version of the installer used to install the RCS or the Console
(IntelSCSInstaller.exe), and the Database Tool.

• If you are installing the RCS in database mode, the Microsoft SQL Server Native Client* must be installed
on the computer. If the client is not installed, the RCS cannot connect to the database. The RCS folder
contains a folder named SQLNativeClient with the 32-bit and 64-bit installers for this client.

• Intel SCS components can run on operating systems installed with these languages: Czech, Danish,
Dutch, English, Finnish, French, German, Greek, Hungarian, Italian, Japanese, Korean, Norwegian,
Polish, Portuguese, Portuguese-Brazilian, Russian, Simplified Chinese, Spanish, Swedish, Traditional
Chinese, Turkish.
• Intel SCS does not support Non-Latin or Extended Latin characters in filenames or values in the XML
files.
• A minimum screen resolution of 1024 x 768 is necessary to use the Console. The 800 x 600 screen
resolution is not supported.

Intel® AMT Configuration Utility – Release Notes 5


2 New Features

2 New Features
This section describes the main new features and changes included in Intel SCS 11.2 Configuration Utility.

2.1 Support for Intel AMT 11.6


Intel SCS 11.2 supports configuration of Intel AMT 11.6.
This includes support for these changes in configuration of Intel AMT 11.6:
• Support for CSME 11.6 – No changes to remote (network) interfaces, host software interfaces, or
local interfaces due to infrastructure change.
• RC4 Cipher Suite Removal – Intel security policy recommendation is to remove support for RC4
cipher suite from Intel® AMT, as it is no longer considered to provide a sufficient level of security for TLS
sessions.

2.2 Changes to Intel SCS Configurator (ACUConfig)


These changes were made to the Intel SCS Configurator (ACUConfig):

• Added checking for Intel-SA-00075. If it detects a vulnerable system, ACUConfig will stop configuration
and report return code 111.

Note:

Management Engine (ME) firmware versions 6.x.x.x – 11.7.x.x having a build number of less than
3000 are considered vulnerable for Intel-SA-00075. (For example, firmware version 9.5.22.1760
would be vulnerable.) It is highly recommended that you upgrade your ME firmware. Read the Public
Security Advisory at https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-
00075&languageid=en-fr for more information.

• ACUConfig.exe and ACU.dll are now statically linked, removing the need to check the signing
certificate on the ACU.dll. This renders the /LowSecurity flag obsolete when executing
ACUConfig.exe. The flag still exists for legacy purposes, but ACUConfig.exe ignores this flag.
• ACUConfig.exe is now signed using a certificate based on SHA-2.

Intel® AMT Configuration Utility – Release Notes 6


3 Known Issues

3 Known Issues
This table describes known issues with version 11.2 of Intel SCS.

ID Description Impact/Solution

DE3619 [ACUConfig] [movetoacm] NotifyRCS command Don’t use /NotifyRCS unless


unsupported in non-DB mode. SCS is running in database
mode.

DE3648 [ACUConfig] [Unconfigure] /deleteadobjectviarcs To avoid the error, don’t use


results in Exit with Code 32 instead of exit code 0. The Active /deleteadobjectviarcs,
Directory object is deleted and the system is un-configured otherwise the error can be
correctly. ignored.

Intel® AMT Configuration Utility – Release Notes 7

You might also like