How To Use Intel AMT features In SureMDM?

SureMDM now supports out-of-band management through Intel’s Active Management Technology (AMT) system, for devices built on the Intel vPro® platform. This simplifies performance, security and device lifecycle management of Intel® Active Management Technology devices.

SureMDM currently supports the following Intel® AMT features:

• Remote Power/Boot Control: Remotely power on, wake, or reboot Intel® AMT-enabled devices with options to change the boot order.
• Hardware Inventory: Get hardware information (BIOS features, CPUs, memory, etc.).
• Event/Audit Logs: Create a configurable list of auditable Intel® AMT actions performed by users and admins. 
• Full KVM (Keyboard, Video, and Mouse) Remote Control: Remotely control and troubleshoot your devices easily, either over a wired or wireless connection.

Intel AMT features in SureMDM

You will need to complete three steps to activate Intel AMT features in SureMDM:

1. Configure Intel AMT settings 
2. Create Intel AMT Configuration Job
3. Apply the created job on the Windows device(s)

Steps to configure Intel AMT settings in the SureMDM Web Console

1. Log in to the SureMDM Web Console.
2. Go to Settings (icon located at the top right of the screen) >  Account Settings > Enterprise Integrations > Intel® AMT Device Management.
3. On the Miscellaneous Settings screen, select Intel AMT Device Management and click Apply.

Steps to create Intel AMT Configuration Job in the SureMDM Web Console

1. Log in to the SureMDM Web Console.
2. Go to Jobs > New Job > Windows > Intel AMT Configuration. 
3. On the Intel AMT Configuration prompt, configure the following settings:

• Job Name: Name the job.
• AMT Username: Enter the device’s username.
• AMT Password: Enter the device’s password.

 4. Once done, click Save.

 The newly created job will be listed under the Jobs List section. 

Steps to apply the created job on the Windows device(s) in the SureMDM Web Console

1. Login to the SureMDM Web Console.
2. Select the Windows device from the device list. 
3. Click Apply to launch the Apply Job/Profile To Device prompt.
4. On the Apply Job/Profile To Device prompt, select the created AMT job and click Apply.
5. Once the job is deployed successfully, the Intel AMT feature in SureMDM would be available for the selected Windows devices.
6. Select the Windows device and click Refresh from the Dynamic Jobs menu, located at the top-right of the console. 
7. Select the Intel AMT dynamic job section to launch the Intel AMT out-of-band web console.

Features are available in the Intel AMT out-of-band console

The following features are available in the Intel AMT out-of-band console:

Intel AMT Status – This option displays the status of the firmware, following active features on the machine.

• Power – Power On/Off
• Name and Domain – Name and domain of the device
• Intel ME – Version activated in Admin Control Mode (ACM)
• Active Features – Redirection Port, Serial-over-LAN, IDE-Redirect, KVM
• Remote Desktop – Primary display, Session Timeout
• User Consent 
• Power Policy 
• Date and Time

Power Operations – IT admins have options to power up to BIOS level and OS level. Different power operations supported by Intel AMT are:

1. Hardware Power control

• Power UP

• Power Down 

• Power Cycle 

• Reset 
  

2. OS Power Control

• Sleep 

• Hibernate 

• Shutdown 

• Restart 
  

3. Boot Control

• Network Boot (PXE) Power

• Network Boot (PXE) Reset

4. BIOS Control

• Power UP to Setup Utility 

• Reset to Setup Utility 
  

• Remote Desktop – This option will start a remote session on the machine’s desktop. Admins will be able to use the keyboard and mouse to control events on the remote screen.
• Hardware Inventory – This option will display the details about the Platform, Baseboard, BIOS, Processors, Memory Modules, and Storage Media.
• Access Inventory – This option will display the event audit logs of users and hardware.

To learn more about Advanced Remote Management with Intel® Active Management Technology and SureMDM, click here.