This is an old revision of the document!


DQ170

Warning: Please be sure that there are no other USB devices connected to your system during formatting like external hard disks, external optical devices or other USB flash drives. This ensures that you only format the selected USB flash drive.

  1. Please download the Rufus tool from https://rufus.akeo.ie/ and extract the file.
  2. Please run Rufus.exe.
  3. Select your USB flash drive, and press the Start button, then confirm the following Warning popup.

rufus_tool_01.jpg

  1. Make sure the BIOS option Secure Boot is disabled.
  2. Change “Boot Mode Select” to UEFI
  3. Go to the Shuttle download area and download the appropriate BIOS version: https://global.shuttle.com/support/download
  4. Unpack the ZIP file into an empty folder.
  5. Copy the subfolders EFI, SHELL and the file startup.nsh to a USB stick, formatted in FAT32.
  6. Boot from the USB stick. You may have to press F7 for boot device selection. Pick the USB drive containing the files.
  7. The update will start automatically. The system will reboot afterwards.
  8. Once reboot is completed, please enter the BIOS setup program by pressing the Del or F2 key and load the “Default Settings” (F3), then confirm by hitting Save & Exit.

Intel® vPro™ is a brand name for a specific set of management and security technologies.
Intel® Active Management Technology (AMT) is a subset of Intel vPro technology.

Intel AMT allows remote access to the PC for management and security tasks, even if the operating system is down, the hard drive has crashed or the PC is powered off, as long as the platform is connected to line power and to a network. Independent software vendors (ISVs) can build applications that take advantage of the features of Intel AMT using the application programming interface (API).

Requirements: Intel® vPro Technology requires a set of hardware and software features:

  1. a vPro-enabled processor - please see below table
  2. a vPro-enabled chipset and BIOS, as provided by DQ170
  3. a vPro-enabled network port - please use the left LAN port of DQ170
  4. correct firmware settings and appropriate software

List of vPro-enabled LGA 1151 desktop processors, which can be used with DQ170.
Only Core i5 / i7 models (except the K series) support the vPro function.

ClassModelCores/ThreadsCPU ClockTurbo ClockCacheTDPGraphics EngineGraphics ClockvPro
Core i767004/83.4 GHz4.0 GHz8 MB65 WHD 530350~1150 MHz
6700T4/82.8 GHz3.6 GHz8 MB35 WHD 530350~1100 MHz
Core i566004/43.3 GHz3.9 GHz6 MB65 WHD 530350~1150 MHz
6600T4/42.7 GHz3.5 GHz6 MB35 WHD 530350~1100 MHz
65004/43.2 GHz3.6 GHz6 MB65 WHD 530350~1150 MHz
6500T4/42.5 GHz3.1 GHz6 MB35 WHD 530350~1100 MHz

Rear view of the DQ170 - only the left network port is enabled for Intel® vPro Technology.

  1. Please press the “Del” key while booting to enter BIOS.
    |
  2. Enter the “Advanced” tab and the “Trusted Computing” menu.
  3. Select “Security Device Support” to enable the Hardware TPM module:
    |
    The DQ170 is equipped with a Trusted Platform Module (TPM v2.0): Nuvoton NPCT650AAAWX. TPM is an international standard for a secure crypto processor, which is a dedicated microcontroller designed to secure hardware by integrating cryptographic keys in devices. This module only supports UEFI mode, not Legacy mode. Windows 7 requires the Microsoft Hotfix KB2920188 (see DQ170 download page) to be installed. This is not required for Windows 10 installations.
  4. Enter the “AMT Configuration” menu to configure the AMT-related settings.
    |
  5. Please enter the AMT Configuration menu and make sure:
    1. “Intel AMT” is set to “enabled”
    2. “MEBx Selection Screen” is set to “enabled”. In this case the system will show “Press <CTRL+P> to Enter MEBX setup menu” during boot process.
      |
  6. Save Changes and Exit the BIOS Setup Utility - the system will now re-boot.
    |
  1. Please press the <CTRL + P> keys while booting to enter the MEBX setup menu. (MEBX = Intel® Management Engine BIOS Extension)
  2. Please log in to the MEBX setup menu - the default password is “admin” (case sensitive).
  3. On first time login, the system will request a new password to be set.

Enter “Intel(R) ME General Setting” to set a new password.
Password rule: At least one capital letter + digit character + non alpha-numeric character, for example: Admin123456!

  1. Go to the TCP/IP settings as follows:
    1. Main menu
    2. Intel(R) AMT Configuration
    3. Network Setup
    4. TCP/IP setting
    5. Wired LAN IPV4 Configuration
  2. Here, the “DHCP Mode” and the local IP information can be set.
    When configuring a vPro-enabled device, it is recommended the MEBX firmware and operating system share the same type of network configuration, so that each is DHCP-enabled or have static IP addresses.
  3. Please enter “Activate Network Access”.

This activates the current network settings and opens the ME network interface.
This option disappears after activation.

  1. After performing all changes, please exit the MEBX setup menu.

There are several management console applications available which can be used to set up and manage Intel vPro technology-based PCs like the DQ170. We picked out two applications:

Intel vPro Platform Solution Manager (60 days test version) This is a framework application that allows you to launch plugin applications (“plugins”) to remotely manage your Intel® vPro™ technology-based PC clients. The available plugins perform tasks such as Alarm Clock, Asset Inventory, Event Log, IDE-Redirection, KVM Remote Control, Power Management, and Serial Over LAN. The plugins can be used for evaluation purposes within a limited period of time.

The Main Screen:

  1. This is a display that shows which AMT clients you have added and wish to manage.
  2. This is the system you are currently connected to.
  3. These are the categories of the available plugins.
  4. This is the plugin panel. For the Intel AMT category, this shows all the feature plugins that are available.
  5. Settings: You can specify saving a list of machines on exit, automatically connect to machines in a list, save the log data on exit and you can view the log file.
  6. When selecting a plugin, a new window pertaining to the plugin selected will open.

Intel® Active Management Technology SDK

Independent software vendors (ISVs) can build applications that take advantage of the features of Intel AMT using the application programming interface (API), which acts very simple and consistent across all Intel AMT versions and SKUs. This enables software developers to easily build support for Intel AMT features into their applications. API Download

MeshCommander (Apache 2.0 License, Open Source)

A web based Intel AMT console. Web applications are flexible and offer many deployment options.

  • Remote management tool for Intel® AMT computers
  • Intel AMT can be managed entirely from a browser
  • Can be installed on an IIS web server in your network
  • Source code and samples available to built your own web based Intel AMT tools (Download)

Current Features:

  • Hardware KVM viewer: remote control from own Keyboard, Video monitor, Mouse
  • Serial-over-LAN VT100 terminal (SOL aka Console Redirection): enables the I/O of the serial port of a managed system to be redirected over IP.
  • IDE-Redirect support (IDE-R): remote imaging of non-functioning devices
  • Power control
  • AMT Event and Audit log viewer with filter box
  • Hardware asset
  • Account management - allows the administrator to delegate some features to others
  • Network settings overview for wired/wireless interface, supports IPv4 and IPv6
  • WIFI management
  • User consent control
  • Enabled feature control
  • Certificate & TLS management
  • CIRA & Environment Detection
  • WSMAN browser (Web Services Management)

  • Last modified: 2017/08/09 09:45
  • by christian