Intel vPro AMT Integration in Scalefusion

Intel Active Management Technology (Intel AMT), a set of hardware-based features, allows remote access to the Windows PCs for management and security tasks, even when an OS is down or PC's power is off. Intel vPro or AMT chipsets offer an inbuilt mechanism that lets take unattended access to a Windows machine and remotely control them. They also offer options to boot to bios and other power related options.

Intel vPro supported Windows devices can be integrated with Scalefusion that enables seamless Remote sessions and perform more operations on those devices, all remotely.

The Intel vPro supported devices when integrated with Scalefusion:

• Allows you to get unattended remote access to the devices
• Take control of the devices remotely either over a wired or wireless connection
• Perform advanced support actions like booting to BIOS.
• Remotely power on, wake, or reboot devices

This requires some settings to be configured which activates Intel vPro enabled devices to be used with Scalefusion. Those are described in the document below.

Prerequisites

On Scalefusion Dashboard

1. Windows Agent v4.0.0 or above should be installed on device
2. At the time of enrollment with Scalefusion, the device should be CONNECTED VIA ETHERNET (LAN)
3. The users should be subscribed to Enterprise Plan (Legacy or modern)

For vPro activation

1. Devices should be Intel vPro AMT supported having Intel® vPro chipset and Processor Intel® Core™ i5 onwards
2. On Scalefusion Dashboard (Utilities > Global Settings > Windows Settings > Configure Intel vPro Settings), configure following settings:
   1. Activate Intel vPro AMT should be enabled
   2. Prompt users to enter their wi-fi details:Enabling this lets users enter their wifi details so that in case the device is not connected to ethernet, the remote session can still take place over wifi network. Enable this particular setting and user will get a prompt on the device to enter their wifi SSID and password.
      1. Wifi Configuration - Alternatively if you have pre-configured Wifi settings those can also be utilized for conducting Remote Control session over wifi network
         1. Navigate to Device Profiles & Policies > All Configurations > Wifi Settings
         2. Create a Basic Configuration or edit an existing one.
         3. In the Wifi Configuration window, enter the wifi settings and enable the setting Auto Publish this Wifi Config for Intel vPro AMT activation
         4. When an Intel vPro AMT device is activated, this wifi configuration will get pushed to the device.
3. Intel MEBx configuration: The device should have Intel MEBx Configuration done and Scalefusion added as DNS suffix before enrollment. Follow these steps to do the same:
   Kindly note that the steps mentioned below are for Lenovo devices. The process may differ based on the PC's manufacturer. Please refer to this for more information.
   
   1. Reboot the system and press Ctrl+P
   2. The MEBx login screen will appear. Enter the password as admin.
      Note:

      This is the default password and can be changed by the administrator once they enter the Intel MEBX configuration menu
   3. On the Intel AMT Configuration screen, go to Remote Setup & Configuration > TLS PKI > PKI DNS Suffix
   4. Enter scalefusion.com as DNS suffix
   5. Restart the device
      If the device is already enrolled, perform the above steps to configure Intel MEBx and add scalefusion as DNS suffix on the device to activate vPro profile.

      
      

Activation Status

The vPro AMT status helps the admin in identifying the current status of vPro AMT activation on the device. These status are reflected if any of the prerequisites are not fulfilled or for other reasons. The status can be one of the following:

Where is the Activation Status visible?

The activation status can be verified from Full Device Information. Here are the steps:

1. Navigate to Devices and go to the vPro AMT supported Windows device. Click on View Details
2. Click on Settings icon > Full Device Information
3. Following items under Device Infoconfirm vPro activation status
   1. Processor name and Manufacturer: Displayed as Intel with processor details
   2. Intel vPro AMT: The status as described in above section
   3. Power Status: Displays the device's power status, that is, on or off
   4. MEBx BIOS password

Functions on vPro AMT Integrated Devices

From Scalefusion Dashboard, following actions can be performed on vPro AMT integrated devices:

Device Details

• Power On/Off
• Sleep
• Hibernate
• Restart
• Delayed Restart

The current state of the device is also visible on Dashboard. For example,

• Powered off
• Sleep Mode

Remote Control

Admins can use the keyboard and mouse to control events on the remote screen:

1. Go to Remote Support > Remote Cast & Control and click on Start Session over the Intel vPro based device to initiate a Remote Cast session.
2. During the remote cast session, following additional functions can be performed by admin, on a vPro AMT enabled device:
   1. Power On: The device can be powered on without losing the remote session
   2. Reset to BIOS: Resets the device to setup utility without losing the session