Intel AMT built-in computers. Chapter 4 “Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers” on page 7 : This chapter provides detailed instructions on how to configure Intel AMT settings on Lenovo ThinkCentre M91p desktop computers.
Page 8
ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
Page 10
PRTC Protected Real Time Clock Pre-shared Key Preboot Execution Environment RCFG Remote Configuration Secure Hash Algorithm Small and Medium Businesses Serial-over-LAN Transmission Control Protocol Transport Layer Security Wake on Lan Zero Touch Configuration ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
ThinkCentre M55p Features and benefits ThinkCentre M91p computers built with Intel AMT enable IT administrators to better discover, heal, and protect the networked computing assets. • Discover: Intel AMT stores hardware and software information in nonvolatile memory (NVM). With built-in manageability, Intel AMT enables IT administrators to discover assets remotely, even when computers are turned off.
Page 12
ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
• Host Based Provisioning (HBP) CIRA ThinkCentre M91p computers built with Intel AMT support the Client Initiated Remote Access (CIRA) function. You can perform this function through ISV applications.. The CIRA function enables client-initiated, secure OOB communication to the manageability console, which includes: •...
KVM user interfaces, see “SOL/IDER/KVM” on page 12. Host Based Provisioning ThinkCentre M91p computers built with Intel AMT support the Host Based Provisioning (HBP) function. As a new feature in Intel AMT 7.X, this function provides new interfaces for system setup and configuration through operating systems.
Chapter 4. Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers The Intel Management Engine (ME) is an isolated and protected computing resource that runs on an Intel AMT computer. The Intel Management Engine BIOS Extension (MEBx) provides a user interface to change or configure settings that control the operation of the Intel Management Engine (ME).
Select Intel(R) ME General Settings in the Intel MEBx MAIN MENU window and press Enter. The INTEL(R) ME PLATFORM CONFIGURATION window opens (Figure 3). This window enables you to configure the general settings of the Intel ME, such as ME state, ME password, power control, and so on. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
Page 17
MEBx again, you will find that the password has been successfully reset to admin. FW Update Settings Select FW Update Settings and press Enter. The FW Update Settings window opens. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
ENERGY STAR program and the EuP Lot 6 requirements, the Intel ME can be turned off in various sleep states. Select Power Control and press Enter. The INTEL(R) ME POWER CONTROL window opens. In the INTEL(R) ME POWER CONTROL window, the following options will be displayed. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
M0: An Intel ME FW power state when the Intel AMT computer is turned on and operational. M3: An Intel ME FW power state when the Intel AMT computer is in sleep mode, hibernation mode, or turned off. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
DISABLED because the user authentication is managed through Kerberos. If the Kerberos network authentication protocol is not used, the IT administrator can choose to enable or disable the username and password for the SOL/IDER session. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
• Enable Remote Control of KVM Opt-in Policy – When this option is selected, remote users can change the User opt-in policy, and can choose whether to request consent from the local user before the KVM remote control session over a computer is established. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
IP address and FQDN on the DNS using the Dynamic DNS Update protocol. Note: Set the host name and domain name before you enable the Dynamic DNS Update feature. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
Page 23
Enables you to enter the alternate DNS address for your Intel AMT computer. Wired LAN IPV6 Configuration Select Wired LAN IPV6 Configuration and press Enter. The WIRED LAN IPV6 CONFIGURATION window opens. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
The Unconfigure Network Access option enables you to reset network settings including network access control lists (ACLs) to factory default settings. Select Unconfigure Network Access and press Enter. Press Y or N when prompted. If you press Y, the following options will be displayed. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
A value of 0 indicates that the PKI DNS suffix was not configured. A value of 1 indicates that the PKI DNS suffix was configured. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
In-process. TLS PKI Select TLS PKI and press Enter. The INTEL(R) REMOTE CONFIGURATION window opens. The Remote Configuration option is used to enable or disable the remote configuration. Enabling or disabling remote ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
The Intel AMT Management Engine Interface (MEI) is the interface between the host and the Intel ME. The Intel AMT MEI is bi-directional so that both the host and the Intel AMT firmware can initiate transactions. Chapter 4 Intel AMT setup and configuration on Lenovo ThinkCentre M91p desktop computers...
The SOL driver is an Intel AMT ME driver. This driver enables the remote display of the managed client user interface through a management console and emulates serial communication over a standard network connection. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
• View and manage the Intel AMT network settings • View and manage the Intel AMT IPv6 network settings • View and manage the Intel AMT system name settings • View and manage the Intel AMT user accounts ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
8. Connect the USB memory key to your Intel AMT computer and restart your computer from the USB memory key. 9. You will receive a message ²Found USB Key for provisioning. Continue with Auto Provisioning (Y/N).² Press Y and then the USB provisioning will be automatically completed. ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
Page 34
GTE CyberTrust Global Root Baltimore CyberTrust Root Cybertrust Global Root Verizon Global Root Entrust.net CA (2048) Entrust Root CA VeriSign Universal Root CA Lenovo AMT Host Name Blank Domain Name Blank Shared/Dedicated FQDN Shared ThinkCentre M91p Intel Active Management TechnologyConfiguration Guide...
Lenovo representative for information on the products and services currently available in your area. Any reference to a Lenovo product, program, or service is not intended to state or imply that only that Lenovo product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any Lenovo intellectual property right may be used instead.
Trademarks Lenovo, the Lenovo logo, and ThinkCentre are trademarks of Lenovo in the United States, other countries, or both. Microsoft and Windows are trademarks of the Microsoft group of companies. Intel and Intel vPro are trademarks of Intel Corporation in the United States, other countries, or both.
Page 38
Part Number: 0A23371 Printed in USA (1P) P/N: 0A23371 *0A23371*...