DQ170

Intel® vPro™ is a brand name for a specific set of management and security technologies.
Intel® Active Management Technology (AMT) is a subset of Intel vPro technology.

Intel AMT allows remote access to the PC for management and security tasks, even if the operating system is down, the hard drive has crashed or the PC is powered off, as long as the platform is connected to line power and to a network. Independent software vendors (ISVs) can build applications that take advantage of the features of Intel AMT using the application programming interface (API).

Requirements: Intel® vPro Technology requires a set of hardware and software features:

1. a vPro-enabled processor - please see below table
2. a vPro-enabled chipset and BIOS, as provided by DQ170
3. a vPro-enabled network port - please use the left LAN port of DQ170
4. correct firmware settings and appropriate software

List of vPro-enabled LGA 1151 desktop processors, which can be used with DQ170.
Only Core i5 / i7 models (except the K series) support the vPro function.

Rear view of the DQ170 - only the left network port is enabled for Intel® vPro Technology.

1. Please press the “Del” key while booting to enter BIOS.
   
2. Enter the “Advanced” tab and the “Trusted Computing” menu.
   
3. Select “Security Device Support” to enable the Hardware TPM module:
   
   The DQ170 is equipped with a Trusted Platform Module (TPM v2.0): Nuvoton Digital IC NPCT6 with FW software (Version 1.3). TPM is an international standard for a secure crypto processor, which is a dedicated microcontroller designed to secure hardware by integrating cryptographic keys in devices. This module only supports UEFI mode, not Legacy mode. Windows 7 requires the Microsoft Hotfix KB2920188 (see DQ170 download page) to be installed. This is not required for Windows 10 installations.
4. Enter the “AMT Configuration” menu to configure the AMT-related settings.
   
5. Please enter the AMT Configuration menu and make sure:
   1. “Intel AMT” is set to “enabled”
   2. “MEBx Selection Screen” is set to “enabled”. In this case the system will show “Press <CTRL+P> to Enter MEBX setup menu” during boot process.
      
6. Save Changes and Exit the BIOS Setup Utility - the system will now re-boot.
   

1. Please press the <CTRL + P> keys while booting to enter the MEBX setup menu. (MEBX = Intel® Management Engine BIOS Extension)
   
2. Please log in to the MEBX setup menu - the default password is “admin” (case sensitive).
   
3. On first time login, the system will request a new password to be set.
   

Enter “Intel(R) ME General Setting” to set a new password.
Password rule: At least one capital letter + digit character + non alpha-numeric character, for example: Admin123456!

1. Go to the TCP/IP settings as follows:
   1. Main menu
   2. Intel(R) AMT Configuration
   3. Network Setup
   4. TCP/IP setting
   5. Wired LAN IPV4 Configuration
      
2. Here, the “DHCP Mode” and the local IP information can be set.
   When configuring a vPro-enabled device, it is recommended the MEBX firmware and operating system share the same type of network configuration, so that each is DHCP-enabled or have static IP addresses.
   
3. Please enter “Activate Network Access”.
   

This activates the current network settings and opens the ME network interface.
This option disappears after activation.

1. After performing all changes, please exit the MEBX setup menu.
   

There are several management console applications available which can be used to set up and manage Intel vPro technology-based PCs like the DQ170. We picked out two applications:

Intel vPro Platform Solution Manager (60 days test version) This is a framework application that allows you to launch plugin applications (“plugins”) to remotely manage your Intel® vPro™ technology-based PC clients. The available plugins perform tasks such as Alarm Clock, Asset Inventory, Event Log, IDE-Redirection, KVM Remote Control, Power Management, and Serial Over LAN. The plugins can be used for evaluation purposes within a limited period of time.

• Download and install Intel vPro Platform Solution Manager on the control side PC
• Introduction

The Main Screen:

1. This is a display that shows which AMT clients you have added and wish to manage.
2. This is the system you are currently connected to.
3. These are the categories of the available plugins.
4. This is the plugin panel. For the Intel AMT category, this shows all the feature plugins that are available.
5. Settings: You can specify saving a list of machines on exit, automatically connect to machines in a list, save the log data on exit and you can view the log file.
6. When selecting a plugin, a new window pertaining to the plugin selected will open.

Independent software vendors (ISVs) can build applications that take advantage of the features of Intel AMT using the application programming interface (API) which acts very simple and consistent across all Intel AMT versions and SKUs. This enables software developers to easily build support for Intel AMT features into their applications. API Download

MeshCommander (Apache 2.0 License, Open Source)

This is a web-based Intel AMT console. Web applications are flexible and offer many deployment options.

• Remote management tool for Intel® AMT computers
• Intel AMT can be managed entirely from a browser
• Can be installed on an IIS web server in your network
• Source code and samples available to build your own web-based Intel AMT tools (Download)

Current Features:

• Hardware KVM viewer: remote control from own keyboard, video monitor, mouse
• Serial-over-LAN VT100 terminal (SOL aka Console Redirection): enables the I/O of the serial port of a managed system to be redirected over IP.
• IDE-Redirect support (IDE-R): remote imaging of non-functioning devices
• Power control
• AMT Event and Audit log viewer with filter box
• Hardware asset
• Account management - allows the administrator to delegate some features to others
• Network settings overview for wired/wireless interface, supports IPv4 and IPv6
• WIFI management
• User consent control
• Enabled feature control
• Certificate & TLS management
• CIRA & Environment Detection
• WSMAN browser (Web Services Management)