Intel Active Management Technology

Intel AMT 3.0 allows an IT administrator to manage desktop machines that are geographically dispersed.

The machines can be managed using a web page that is served up by firmware running on a service processor built into the North Bridge of the motherboard. This web page is available even if the machine is turned off, as long as it is still plugged in.

The usual HTTP address for a machine's AMT web page is:

http://<AMT-IP-address>:16992

The AMT-IP-address could be the same or different as the machine's regular IP address.

The machines can also be managed using WS-Management. Also known as Web Services for System Management. This protocol uses SOAP over HTTP. Using a library like [https://wiseman.dev.java.net Wiseman], an application could be written that sends a command to a group of machines. For example, this application could shut down all the machines as 5pm to save power.

Intel machines that support AMT are usually shipped with AMT disabled. AMT must be enabled in the BIOS setup. When AMT is enabled, the AMT BIOS extension runs.

To configure AMT, you must type -P to get into the AMT BIOS extension. The default password is "admin" (without the quotes). Before you can configure AMT, you must change the password.

Intel Manageability Engine (ME)

Also known as the ME.

This is the firmware embedded in the Ethernet network interface chip.

Intel Manageability Engine Interface driver

Also known as the HECI driver.

This is the interface to the Intel Manageability Engine.

Local Manageability Service

Also known as LMS.

The purpose of LMS is to allow an IT administrator to monitor the health of a critical application running on the machine under the host operating system. The example usually given is a virus scanner like Norton Anti-Virus. By communicating through LMS and HECI, the application delivers a heartbeat to the AMT firmware. If the heartbeat stops, AMT knows something is wrong and can alert the IT administrator through a system management application. An example of such an application is HP OpenView.

LMS provides the critical application with the same WS-Management interface as an external user. With the exception that the AMT firmware knows that the application is running on the local machine. The application is still required to authenticate.

To test LMS, the only AMT BIOS extension configuration needed is:

Small Business Model
DHCP
Give the machine a name and enter your DNS domain

To enable LMS in Solaris:

svcadm enable network/lms

The stack looks like this

+----------------------------------------+
| Sample Critical Software Application   |
+----------------------------------------+
|                LMS                     |
+----------------------------------------+
|                HECI                    |
+----------------------------------------+
|Intel Manageability Engine (ME) firmware|
+----------------------------------------+
|             Ethernet NIC               |
+----------------------------------------+

External links

Wikipedia Intel Active Management Technology
   http://en.wikipedia.org/wiki/Intel_Active_Management_Technology

Intel Active Management Technology
   http://www.intel.com/technology/platform-technology/intel-amt

Open Source Intel AMT Drivers and Tools
   http://http://www.openamt.org

DTMF Web Services for Management
   http://www.dmtf.org/standards/wbem/wsman

Wiseman: Open-source java implementation of WS-Management
   https://wiseman.dev.java.net
Comments:

Post a Comment:
  • HTML Syntax: NOT allowed
About

Mark Logan

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today