If the Intel AMT device on a computer is not initialized by the OEM, USB key initialization is the recommended method. This method is much less labor intensive and error prone than initialization through MEBx.
To use the USB initialization method with Intel AMT 2.0, 2.2, and 2.6 computers, the MEBx settings on the computer must be in the factory default state.
This means that the following conditions are met:
No PID-PPS pairs installed
Factory default MEBx and Intel AMT passwords
If you have already accessed the MEBx and changed the factory default password, you cannot use the USB key initialization method unless you reset the MEBx to factory defaults. Usually, you can reset the MEBx by removing and replacing the system board battery or pressing the reset button if the system board has such a button.
If you do not want to reset the MEBx, use the MEBx initialization method for systems with changed passwords.
It is important to have the USB key properly configured. USB key requirements vary from hardware vendor to vendor, but your USB key should work on most computers if you meet the general USB key requirements.
The USB key requirements are as follows:
Format the USB key with FAT16 (some USB keys come formatted with FAT32).
We do not recommend using USB keys larger than 512 MB.
The setup.bin file must be the only file that is stored on the USB key.
To initialize Intel AMT manually using the USB key
In the Symantec Management Console, on the Settings menu, click All Settings.
In the left pane, click Remote Management > Out of Band Management > Configuration Service Settings > Security Keys.
(Optional) To use previously generated keys that have not been used, on the Security Keys page, click the PID-PPS keys you want to export to the USB key.
On the Security Keys page, click the Export security keys to USB key symbol.
If you want to export the keys that you have already generated, in the Export Security Keys to USB Key dialog box, click All or Only Selected.
If you want to generate new keys, click Generate keys before export, and then specify the following options for generating the key file:
Number of security keys to generate
Type a number equal or greater than the number of Intel AMT computers you want to initialize with the USB key. Each key is used only once. There is no problem with exporting extra keys for use later or even not at all.
A file with the keys is created in the format expected by the platform BIOS.
Click the Download USB key file link, and then save the file to the USB key.
The exported keys are also added to the Intel SCS database.
Go to the physical location of the Intel AMT computer, and then connect the cables (including network), a monitor, and a keyboard.
Insert the USB key and power-up or restart the computer.
Follow the on-screen instructions to initialize the computer.
The specific PID-PPS key pair that is used to initialize the computer is marked on the USB key as used, so the key cannot be used again.
Restart the computer.
The computer starts sending Hello messages to the OOB site server computer (by default, the Notification Server computer). Out of Band Management Component configures the Intel AMT computer with the profile that you assigned to this resource.
(Optional) Use the USB key to initialize other computers.
Imported Document ID: HOWTO63622
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe