dell intel vpro amt plugin for windows small business server … · 2013-12-24 · the dell amt...

Dell AMT vPro Plugin For Windows Small Business Server 2011 EssentialsVersion 1.0 User's Guide

Notes, Cautions, and WarningsNOTE: A NOTE indicates important information that helps you make better use of your computer.

CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem.

WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

© 2012 Dell Inc.

Trademarks used in this text: Dell™, the Dell logo, Dell Boomi™, Dell Precision™ , OptiPlex™, Latitude™, PowerEdge™, PowerVault™, PowerConnect™, OpenManage™, EqualLogic™, Compellent™, KACE™, FlexAddress™, Force10™ and Vostro™ are trademarks of Dell Inc. Intel®, Pentium®, Xeon®, Core® and Celeron® are registered trademarks of Intel Corporation in the U.S. and other countries. AMD®

is a registered trademark and AMD Opteron™, AMD Phenom™ and AMD Sempron™ are trademarks of Advanced Micro Devices, Inc. Microsoft®, Windows®, Windows Server®, Internet Explorer®, MS-DOS®, Windows Vista® and Active Directory® are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries. Red Hat® and Red Hat®Enterprise Linux® are registered trademarks of Red Hat, Inc. in the United States and/or other countries. Novell® and SUSE® are registered trademarks of Novell Inc. in the United States and other countries. Oracle® is a registered trademark of Oracle Corporation and/or its affiliates. Citrix®, Xen®, XenServer® and XenMotion® are either registered trademarks or trademarks of Citrix Systems, Inc. in the United States and/or other countries. VMware®, Virtual SMP®, vMotion®, vCenter® and vSphere® are registered trademarks or trademarks of VMware, Inc. in the United States or other countries. IBM® is a registered trademark of International Business Machines Corporation.

2012 - 07

Rev. A00

Contents

Notes, Cautions, and Warnings...................................................................................................2

1 Overview.......................................................................................................................................5Launching the Dell AMT Plug-in...............................................................................................................................5Provisioning..............................................................................................................................................................5

Provisioning Using Intel Setup And Configuration Service................................................................................5Configuring Client Machines Using Intel Setup & Configuration Service (SCS)................................................6Provisioning Client Systems...............................................................................................................................7

Client Configuration..................................................................................................................................................7Configuring Power Profile..................................................................................................................................7Configuring the Boot Order................................................................................................................................8Configuring BIOS Settings..................................................................................................................................8Setting BIOS Passwords....................................................................................................................................9

Operations..............................................................................................................................................................10Performing Power Management......................................................................................................................10Establishing KVM Sessions..............................................................................................................................11

Generating Reports.................................................................................................................................................11Scheduling Reports..........................................................................................................................................11Retrieving Reports............................................................................................................................................12

Application Preferences.........................................................................................................................................12Account SetUp.................................................................................................................................................12KVM Setup........................................................................................................................................................12Logging.............................................................................................................................................................13Task Queue Setup............................................................................................................................................13Discover Systems.............................................................................................................................................13

Task Queue.............................................................................................................................................................14Configuring WinRM..........................................................................................................................................14

OverviewThe Dell AMT vPRO Plugin for Microsoft Windows Small Business Server 2011 Essentials is an easy-to-use application that provides an out-of-band management solution. The application allows you to remotely manage client systems regardless of the state, the system power, or operating system is in.

You can use Intel AMT vPRO Plugin management utility to perform the following tasks:

• USB Provisioning• Perform client configuration like

– Configuring power profile– Configuring the boot order– Configuring the BIOS settings– Configuring BIOS passwords

• Perform remote operations like

– Perform KVM sessions– Remotely manage power settings

• Generate reports for Hardware Inventory, Battery information, Out-of-band Manageability, and system provisioned.

• Monitor task progress and details

Launching the Dell AMT Plug-inYou can launch the AMT plug-in by clicking Start → All Programs → Dell → Dell AMT Plugin → Dell AMT Plugin .

ProvisioningBefore Intel Active Management Technology-based client systems are managed out-of-band by Dell AMT vPRO Plug-in, you must provision them using Intel Setup and Configuration Service.

Provisioning Using Intel Setup And Configuration Service

Deploying Intel AMT vPro OOB management platforms using remote configuration requires a digital provisioning certificate procured by the client systems using Intel Setup and Configuration Service (Intel SCS) 7.1. For more information on installing Intel Setup and Configuration Service (Intel SCS) 7.1, see the “Installing Intel Setup and Configuration Service (Intel SCS)” section of the Dell Intel AMT vPro Plugin For Windows Small Business Server 2011 Essentials Version 1.0 Quick Install Guide.

To provision the client systems using Intel Setup and Configuration Service:

1. Click Start → All Programs → Intel → Intel(R) SCS 7.1 WizardThe Intel Active Management Technology Configuration Utility screen is displayed.

2. Click Create Settings to Configure Multiple Systems.3. Click the New icon to create a new profile.

The Getting Started tab is displayed.

4. Enter a profile name in the Profile Name field.5. Select the Configuration/Reconfiguration option.

5

6. Click Next.the Optional Settings tab is displayed.

7. Select the Active Directory Integration, Access Control List (ACL), and Transport Layer Security (TLS) check boxes.

8. Click Next.The AD Integration tab is displayed.

9. Select the Active Directory OU option and click the browse icon to select the Organizational Unit (OU) for the Dell Client systems with AMT enabled.The Optional Settings : Access Control List (ACL) tab is displayed.

10. Click AddThe User/Group Details dialog box is displayed.

11. To provide access to Active Directory User/Group:a) Select the Active Directory User/Group option.b) Click Browse to select the user or groups to provide access.c) Select the Both from the Access Type drop-down menu.d) Select the Realms to access and click OK.

12. To provide access to a Digest User.a) Select the Digest User option.b) Enter the Username and Password of the local user.c) Select the Remote from the Access Type drop-down menu.d) Select the Realms to access and click OK.

13. Click Next.The Optional Settings : Transport Layer Security (TLS) tab is displayed.

14. Choose your Certificate Authority.

15. Select WebServer from the Server Certificate Template drop-down menu and click Next.The System Setting tab is displayed.

16. Configure the Management Interfaces, Power Management Settings , and Network Settings.

17. Click Next.

18. Click Finish.

After building your profile using the Intel Active Management Technology Profile Designer configure the client machines. For more information, see Configuring Client Machines Using Intel Setup & Configuration Service (SCS).

Configuring Client Machines Using Intel Setup & Configuration Service (SCS)

1. Connect a USB drive to the system running Microsoft Small Business Server 2011.

2. Click Start → All Programs → Intel → Intel(R) SCS 7.1 Wizard.The Intel Active Management Technology Configuration Utility screen is displayed.

3. Click Tools → Prepare a USB key for Manual Configuration.The Settings for Manual Configuration of Multiple Systems dialog box is displayed.

4. Select the type of client system.

5. Select the Intel AMT version.

6. Under the Configuration Settings enter credentials for MEBx settings.

7. Specify the system power states in which the Management Engine is operational.

8. Select the USB drive from USB Drive drop-down list.

9. Click OK.

6

The attached USB drive is ready for provisioning client systems. For more information, see Provisioning Client Systems.

Provisioning Client Systems

1. Connect the USB key which is ready for client provisioning in the client system you want to provision. For more information, see Client Machines Using Intel Setup & Configuration Service (SCS).

2. Reboot the client systems and when the Dell logo appears press F12 to enter the One Time Boot menu.

3. Select Intel Management Engine Bios Extension (MEBx).

4. Enter Y when the Found USB Key for provisioning. Continue with Auto Provisioning (Y/N) message is displayed.

The Configuration Settings from the USB file were successfully applied Press any key to continue with system boot… message is displayed.

5. Log in to the Windows account on your client systems.

6. Copy the ACU_Configurator folder from the IntelAMTSCS folder on the Windows SBS server to the Dell client system.

7. On the client system navigate to the ACU_Configurator through the command prompt with administrative privileges.

8. Enter the following command ACUConfig.exe /output file acuoutput.txt /verbose configviarcsonly<IPAddress of SBS Server><TLSProfile> /WMIUser <Domain>\<DomainUser>.

The client system is now configured in the Admin Control Mode and able to run operations from the AMT Plugin console. To verify this open acuoutput.txt from the directory in which ACUConfig is running. The last entry in this log should read (Success). Another method to check this is to open Intel Management and Security Status from the system tray at the bottom left corner, open the Advanced tab and make sure that the client machine is configured in Admin Control Mode.

Client ConfigurationAllows you to configure the Power Profile, Boot Order, BIOS Settings, and BIOS Passwords on the target client systems.

Configuring Power Profile

You can control various functions like Wake-up On Lan (WOL), ON, OFF after power loss, and so on, in the different power states (S0 to S5) of your client system.

1. Launch the AMT plug-in. For more information, see Launching the Dell AMT Plug-in.

2. On the Home screen, click Client Configuration.

3. On the Client Configuration screen, click Power Profile.

4. Select the power package for your desktop and/or mobile computers. Click Next.The Select Clients tab is displayed.

5. Search for client systems to which you want to apply the power packages.

6. Select the client systems to which you want to install the power packages on and click Add.

7. Click Next.The Schedule Task tab is displayed.

8. You can either choose to apply the changes immediately or schedule it to run at a later time.Depending on your schedule, select one of the following options:

– Run now — the changes to the Power Profiles are immediately applied and displays the Running status in the Task Queue.

– Run At — the changes to the Power Profiles are queued in the Task Queue.

7

NOTE: You can launch the Task Queue to view the list of completed and pending tasks.

NOTE: If your client systems are not connected to the network, you have to run the task again.

9. Provide a brief description of the package you are applying and click Finish.

Configuring the Boot Order

Change or configure the boot order on the targeted client-systems.

1. Launch the Dell AMT plug-in. For more information, see Launching the Dell AMT Plug-in.


3. On the Client Configuration screen, click Boot Order.The Boot Order tab is displayed.

4. The table on the left side lists all the possible Boot devices. Change the boot order by:

– Moving the boot devices up or down the order by clicking on the Up or Down arrows at the bottom of the table.

– Disabling boot devices by clicking on the on/off toggle switch.

5. Select one of the configuration options:

– One-time configuration — the boot-order will be changed for only one reboot cycle.

– Permanent configuration — the boot-order is permanently changed.

6. If you want the Task execution to continue to subsequent clients systems when an error occurs, select the Continue on error option. Otherwise, Task execution will stop on the first client system where an error is encountered.

7. If you want to reboot the client systems after applying changes select the Reboot after applying changes option.

8. Click Next.The Select Clients tab is opened.

9. Search for client systems you want to apply the Boot Order changes to.

10. Select the client systems you want to apply the Boot Order changes from the list of client systems under Available and click Add.


12. You can either choose to apply the changes immediately or schedule it to run at a later time.Depending on your schedule, select one of the following options:

– Run now — the changes to the Boot Order is immediately applied and displays the Running status in the Task Queue.

– Run At — the changes to the Boot Order is queued in the Task Queue.


NOTE: If your client systems are not connected to the network, you have to run the task again.

13. Provide a brief description of the changes you are applying and click Finish.

Configuring BIOS Settings

This feature allows you to configure and change the BIOS settings.

8



3. On the Client Configuration window, click BIOS Settings.The BIOS Settings tab is displayed.

4. Make the changes you want to the BIOS settings for your client-systems and select the check box under Apply.

5. If you want the Task execution to continue to subsequent clients systems when an error occurs, select the Continue on error option. Otherwise, Task execution will stop on the first client system where an error is encountered.

6. Select the Continue on unavailable BIOS Setting option to continue with the BIOS changes if a particular BIOS feature is not available on the client system.

7. Select the Reboot after applying changes option if you want to reboot after applying changes.

8. You can load predetermined/default BIOS values through the BIOS Attribute Config Source:

– BIOSAttributeConfig.xml — load BIOS settings from the BIOSAttributeConfig.xml file contained in the install folder.

– Defaults — load the factory settings.9. Click Next.

The Select Clients tab is displayed.

10. Search for the client-systems you want to update the BIOS attributes.

11. Select the client-systems you want to update the BIOS attributes and click Add.


13. You can either choose to apply the changes immediately or schedule it to run at a later time.Depending on the schedule, select one of the following options:

– Run now — the BIOS setting configuration is immediately applied and displays the Running status in the Task Queue.

– Run At — the BIOS setting configuration is queued in the Task Queue.


NOTE: If the Dell client systems are not connected to the network, you have to run the task again.

14. Provide a brief description of the BIOS attribute changes you are applying and click Finish.

Setting BIOS Passwords

The feature allows you to set passwords, clear passwords, or change the length requirements for your client system's Administrator and/or System passwords.


2. On the Home screen click Client Configuration.

3. On the Client Configuration window, click BIOS Passwords.The BIOS Passwords tab is displayed.

4. Select one of the following options:

– Clear — clear either the Admin or System password.

NOTE: To clear the Admin password you have to clear the System password as well.

– Set — enter and confirm the Admin or System password.

9

NOTE: Client systems have to reboot after setting the Admin or System passwords.

– Length — you can specify the minimum and maximum length for the Admin and System password.5. If you want the Task execution to continue to subsequent clients systems when an error occurs, select the

Continue on error option. Otherwise, Task execution will stop on the first client system where an error is encountered

6. If you want to reboot after applying changes select the Reboot after applying changes option.7. Click Next.


8. Search for the list of client systems that you want to change the BIOS passwords.9. Select the client systems you want to change the BIOS passwords and click Add.10. Click Next.

The Schedule Task tab is displayed.

11. You can either choose to apply the password changes immediately or schedule it to run at a later time.Depending on the schedule, select one of the following options:

– Run now — the BIOS password configuration is immediately applied and displays the Running status in the Task Queue.


– Run At — the BIOS password configuration is queued in the Task Queue.


12. Provide a brief description of the changes your are applying and click Finish.

OperationsThis feature allows you to cold and warm reboot the Dell client-systems and setup KVM sessions

Performing Power Management

To Reboot and Shutdown the remote client-systems:

1. Launch the Dell AMT plug-in. For more information, see Launching the Dell AMT Plug-in.2. On the Home screen, click Operations.3. On the Operation tab, click Power Management.

The Power Management tab is displayed.

4. Select the power control option you want to on the client-systems from the drop-down list.5. Click Next.


6. Search for the client-systems you want apply the Power Management changes.7. Select the client-systems you want to apply the Power Management changes and click Add.8. Click Next.

The Schedule Task tab is displayed.

9. You can either choose to apply the task immediately or schedule it to run at a later time.Depending on your schedule, select one of the following options:

– Run now — the power management changes are immediately applied and displays the Running status in the Task Queue.

10


– Run At — the power management changes are queued in the Task Queue.


10. Provide a brief description of the task you are applying and click Finish.

Establishing KVM Sessions

To establish KVM sessions with remote client systems:

1. Launch the Dell AMT vPro Plugin. For more information, see Launching the Dell AMT Plug-in.2. On the Home screen, click Operations.3. On the Operation window, click KVM Connect.

The KVM Connect tab is displayed.

4. Search for the list of client systems on which you want establish KVM sessions.5. Select a client system on which you want to start the KVM session and click Start.

Generating ReportsThis feature allows you to generate and view OOB Manageability, Provisioning, Battery Health of notebook client-systems, and Hardware Inventory reports.

1. Launch the Dell AMT plug-in. For more information, see Launching the Dell AMT Plug-in.2. On the Home screen, click Reports.3. On the Welcome screen you can generate the following reports:

– OOB Manageability — you can see the AMT Management Engine configuration for client systems.– Provisioning — view the provisioning status of all the client systems in the network.– Battery Health — view the battery health of all the AMT enabled client systems on the network.– Hardware Inventory — collect the inventory information of all the client systems on the network.

4. After selecting the type of report you want, you can perform one of the following actions:

– Schedule — for more information, see Scheduling Reports.– Retrieve — for more information, see Retrieving Reports.

Scheduling Reports

Generate reports from all the active client systems on the network. To schedule a report:

1. Click Schedule.The Select Clients tab is displayed.

2. Search for the list of client systems you want to view the reports on.3. Select the client systems you want to view the reports and click Add.4. Click Next.5. The Schedule Report tab is displayed.6. You can either choose to apply the Task immediately or schedule it to run at a later time.7. Provide a brief description of the Task you are applying and click Finish.

NOTE: Schedule reports creates a task that populates data about client systems.

11

Retrieving Reports

NOTE: Retrieving reports requests a report for whatever data has been collected by the scheduled reports.

View existing reports. To retrieve a report:

1. Click Retrieve.The Select Clients tab is displayed.

2. Search for the list of client systems you want to view the reports on.3. Select the client systems you want to view the reports. Click Add.4. Click Next.

The Retrieve Report tab is displayed.

5. Print, Copy, or Export the report.

NOTE: The report is exported as a .xlsx file.

Application PreferencesOn this screen you can configure and set the preferences for different components of the application like:

• Account SetUp• KVM Setup• Logging• Task Queue• Discover Systems

Account SetUp

You can configure where the task requests, and configuration data are stored.

1. Launch the Dell AMT Plugin. For more information, see Launching the Dell AMT Plug-in.2. On the Home screen, click Application Preferences.3. On the Welcome screen, click Account SetUp.

The Account SetUp tab is displayed.

4. You can configure the following settings:

– Configure your Windows Account settings.– Configure your AMT ME Account settings.

5. Click Save and Finish.

KVM Setup

This feature allows you to configure and setup the Keyboard, Video, and Monitor (KVM) sessions.

NOTE: Before a remote KVM session can be established, enable KVM through the Intel Management Engine BIOS Extension (MEBx) interface.

1. Launch the Dell AMT Plugin. For more information, see Launching the Dell AMT Plug-in.2. On the Home screen, click Application Preferences.

12

3. On the Application Preferences tab, click KVM Setup.The KVM Setup tab is displayed.

4. Select either Primary or Secondary option as the screen you want to connect at the start of the KVM session with.

5. If you want the user to provide consent, select the User Consent check box.

6. Set the time frame for the User Consent session to time-out using the User Consent Timeout.

7. Set the time frame for the KVM session to time-out after a period of inactivity using the Session Timeout.

8. Click Finish.

Logging

Set the preferences for the type of logs you want to capture by DCIP.

1. Launch the Dell AMT Plugin. For more information, see Launching the Dell AMT Plug-in.

2. On the Home screen, click Application Preferences.

3. On the Welcome screen, click Logging.The Logging screen is displayed.

4. Select one of the following type of Logs from the Log Level drop-down menu:

– None — no logs are captured.

– Normal — typical logging for client systems operating normally. This is the recommended setting.

– Debug — detailed logging for troubleshooting unexpected issues.5. Click Browse to choose the location where your log files are created.

6. To view existing logs, click Open Containing Folder.

7. Click Save and Finish

Task Queue Setup

This feature allows you to limit the number of task requests saved and displayed in the Task Queue window.



3. On the Welcome screen, click Task Queue.The Task Queue tab is displayed.

4. Set the Task History Limit to the number of tasks you wish to retain in the database (1-500).

NOTE: The older completed tasks will be automatically deleted from the database as new tasks are created.

5. To have your Task Queue automatically refresh every 15 seconds, select the Refresh the task list automatically option.

NOTE: To reduce database activity, deselect the Refresh the task list automatically option and click Refresh on the Task Queue to update the Task list.

Discover Systems

This feature allows you to discover AMT enabled client systems on the network.



13

3. On the Welcome screen, click Discover Systems.The Discover Systems tab is displayed.

4. Under the Discovery Method select the method to discover the client system:

– By DNS — searches for client systems in the domain the system hosting Dell AMT Plugin belongs to.

– By IP Range — specify an IP range to search for Dell client systems5. Select the client systems to manage and click Add.6. Select one of following option to add the client systems to the database.

– Add New Systems Only

– Add/Update Systems

– Clear Selected Systems7. Click Finish

Task QueueThe Task Queue window allows you to review scheduled and completed tasks. You can also click:

• View — to get detailed information on an individual task in the task queue. Click Export to export the information to an excel file.

• Refresh — to refresh the task queue.

• Re-Run — to re-run an existing task which has failed on client systems while skipping those client systems on which the task has run successfully. If a Task was completed without any errors, then Re-Run will restart all client systems in the Task.

• Retrieve — executes the Retrieve (instead of the Schedule) path of a report task.

• Edit — edit tasks that are pending (waiting to be run). Tasks are placed on Hold while editing is underway.

• Clone — clone pending, completed, and canceled tasks.

• Cancel — cancel tasks that are not yet Completed.

Configuring WinRM

On client system, if WinRm has not been configured type the following command on an administrative command prompt.

NOTE: Configure the client systems firewall to accept WinRM commands.

The WinRM is configured.

1. Enter winrm quickconfig.2. Press y to continue if prompted Do you want to configure winrm?3. winrm set winrm/config/client @{AllowUnencrypted="true"}4. winrm set winrm/config/client/auth @{Digest="true"}5. winrm set winrm/config/client @{TrustedHosts="MANAGEMENT_SERVER_IP_ADDRESS"}

14

dell intel vpro amt plugin for windows small business server … · 2013-12-24 · the dell amt...

Documents