Hi guys,
I’ll be delivering a session at Intel’s “Life after death using… Intel® vPro™ Technology!” conference held on September 14th 2009 at Air Port City, Israel.
This session will focus on integrating SCCM In-Band management capabilities with vPro Out of Band capabilities.
Out of band management allows an administrator to connect to a computer’s management controller when the computer is turned off, in sleep or hibernate modes, or otherwise unresponsive through the operating system. By way of contrast, in-band management is the classic approach used by Configuration Manager and its predecessors whereby an agent runs in the full operating system on the managed computer and the management controller accomplishes tasks by communicating with the management agent.
Out of band management supplements in-band management. While in-band management supports a wider range of operations because it’s environment is the full operating system, in-band management might not be functional if the operating system is not present or is not operational. In these situations, the supplementary capabilities of out of band management allow administrators to manage these computers without requiring local access to the computer.
Out of band management tasks include the following:
- Powering on one or many computers (for example, for maintenance on computers outside business hours).
- Powering off one or many computers (for example, the operating system stops responding).
- Restarting a nonfunctioning computer or booting from a locally connected device or known good boot image file.
- Re-imaging a computer by booting from a boot image file that is located on the network or by using a PXE server.
- Reconfiguring the BIOS settings on a selected computer (and bypassing the BIOS password if this is supported by the BIOS manufacturer).
- Booting to a command-based operating system to run commands, repair utilities, or diagnostic applications (for example, upgrading the firmware or running a disk repair utility).
- Configuring scheduled software update deployments and advertisements to wake up computers prior to running.
SP2 for SCCM 2007 R2 added some important new features, like:
New Operating System Support
• Windows 7
• Windows Server 2008 R2
• Windows Server 2008 SP2
• Windows Vista Sp2
New Features in Out of Band Management
Configuration Manager 2007 Service Pack 2 improves on the Intel AMT integration provided in Service Pack 1. SP2 adds full feature support for computers that have the Intel vPro chip set and AMT firmware versions 4 & 5. In addition to providing feature parity with SP1 and AMT firmware versions 3.2.1, 4.0 and 5.0, the following new features are supported:
Wireless Management (mobile only)
• Up to eight (8) wireless profiles per out of band service point
• Profiles support SSID, WAP2-Enterprise or WAP-Enterprise security, AES or TKIP encryption, client authentication options of EAP-TLS or EAP-TTLS/MSCHAPv2 or PEAPv0/EAP-MSCHAPv2
• Versions of AMT earlier than 3.2.1 are supported with the Intel translator
Authenticated Wired 802.1x Management
• Single profile
• Profile supports client authentication options of EAP-TLS or EAP-TTLS/MSCHAPv2 or PEAPv0/EAP-MSCHAPv2
• Versions of AMT earlier than 3.2.1 are supported with the Intel translator
Audit Logging
• Supported on AMT versions 4 and 5
• Select which out of band management features to audit (critical events not supported)
• Enable or disable audit logging per computer after provisioning
• View, clear, and export to file the audit log entries by using the out of band management console
Power State Configuration
• Enable configuration of the power settings to specify whether out of band management activity is supported when the host is on (S0), host is on (S0) or in standby (S3), or always on (S0-S5)
Data Storage
• Save up to 4096 bytes in ASCII characters in the AMT data storage of each computer
• View and save to the data store by using the out of band management console
Lastly, check out this cool integration demo from Intel – a ConfigMgr advertisement is used to remotely and securely wake-up (boot) Intel vPro systems and push an automated BIOS upgrade.

References for additional reading:
vPro ROI Analysis / Benefits of Activating
http://communities.intel.com/docs/DOC-1494/
Case Stories
http://communities.intel.com/docs/DOC-2260
vPro / SCCM Check list, Quick start Guide, & Tips & Tricks
http://communities.intel.com/community/openportit/vproexpert/microsoft-vpro
ConfigMgr Administrators Checklist and Prerequisites
http://technet.microsoft.com/en-us/library/cc161943(TechNet.10).aspx
http://technet.microsoft.com/en-us/library/cc161785(TechNet.10).aspx
Self Pace SCCM SP1 / vPro Activation Training
http://communities.intel.com/community/openportit/vproexpert/microsoft-vpro/blog/2008/10/24/microsoft-sccm-2007-sp1-intel-vpro-training-videos-now-available
Infrastructure Prep Checklist for Microsoft SCCM
http://communities.intel.com/openport/docs/DOC-2300
VN:F [1.9.3_1094]
VN:F [1.9.3_1094]
Recent Comments