Thursday, 15 November 2007

Intel VPro and System Center Configuration Manager 2007

Out-of-band management. Imagine that your motherboard draws a small amount of current even when your machine isn't running—rather than just wake-on-LAN (which has been around for years) there are all kinds of other things that you can do to your machine while it is turned off… J This is the presentation that will tell us what (and I know both the presenters—one from MSFT, one from Intel).

We were a little surprised (or at least I was) that the presentation was not particularly well attended—I wonder if that is because "VPro" is not actually in the title of the session. I guess I knew as a result of the inside track that AMT (Active Management Technology) is part of VPro and that out-of-band management is what you can do with AMT.

  • Remote Power Control: power a device up or down over the wire (including, of course, Wake-on-LAN)
  • Redirecting IDE—allows a help-desk operator to re-boot your machine from a known good image elsewhere on the network.
  • Serial-over-LAN (seeing the BIOS screen on a remote machine, during boot)

SCCM 2007 provisioning of the AMT technology; Query of AMT enabled devices; Remote console (BIOS). Out-of-Band service point is a new SCCM site role. Certificate based security, with mutual authentication via Active Directory and Kerberos.

Can use in conjunction with Operating System Deployment Task Sequencing (in SCCM 2007) – so the ISO image that performs a task sequence – gets kicked off through IDE redirection. Nice. Though the transport differs between AMT 2 and AMT 3, the admin does not need to know what protocol is being used.

No comments: