Clik here to view.
Re: Trouble using Agent Presence
Def-Logix_Developer,with 7th Gen Intel Core vPro intel introduced requirement for OEM BIOS to include USB provisioning setting and its factory default value shall be set to Disabled.With previous Gen...
View ArticleClik here to view.
Re: NTEL-SA-00075 Detection does not detect status in registry
Hi NickPifer86,I apologize for asking you to do this. I would for you but I do not have your contact information. Would like to get the log file that is created when you run the tool....the .htm file...
View ArticleClik here to view.
Re: Missing Boot Options on AMT WebUI
Hi Musketier...Sending an e-mail to you.Regards,Michael
View ArticleClik here to view.
Automating Intel AMT MEBx Configuration
Hi All, Currently we have a scenario,To prevent the Intel AMT attacks, we are following the below manual steps on the machines. 1. Login to MEBx with default password "admin" by pressing Ctrl-P during...
View ArticleRe: Automating Intel AMT MEBx Configuration
I too would like to script a password change from admin to something more secure. Is this possible? We have been trying for a while to find a solution with no success. There does not seem to be a link...
View ArticleRe: Disabling AMT
Question on this solution. If we do this, what is to stop someone from re-enabling it using the default admin password?If that is a risk, then how can we change the default admin password in a script...
View ArticleClik here to view.
Re: Researchers Found Another Major Security Flaw in Intel CPUs
Hi Surlycanuck,When security issues are discovered, Intel works closely to address the issues with our direct cloud service customers and the cloud service customers of OEM's such as Lenovo, Dell and...
View ArticleClik here to view.
How can we change the AMT default password from admin by script?
Good morning, We need to change the AMT password on 40k machines in SCCM from admin to something secure. How can we do this? I cant seem to find a way to make this work in a script. Someone must have...
View ArticleClik here to view.
AMT vulnerability
I am looking to find some concrete information on what steps will need to be taken in order to mitigate the AMT vulnerability (CVE-2017-5689) in our environment and would appreciate any...
View ArticleClik here to view.
Re: AMT vulnerability
As an update to this request for information, I found that even after running the mitigation tool against a device and taking the following three steps, unprovision (which it reported that it was never...
View ArticleRe: Disabling AMT
Hi Phil,If someone has:1. Physical access to the system2. Is knowledgeable enough to access MEBx3. MEBx password is set to default and has not been changed.then they would be able to re-enable AMT...
View ArticleClik here to view.
Re: How can we change the AMT default password from admin by script?
Hi Phil,I had responded to your previous post under "Disabling AMT":https://communities.intel.com/thread/119990Now I have a little more detail as far as the number of systems you are needing to...
View ArticleRe: How can we change the AMT default password from admin by script?
Thank you very much for your help.To answer your question - no we have not provisioned AMT. Currently we do not use it. We would just like to protect ourselves from any potential abuse of the default...
View ArticleRe: How can we change the AMT default password from admin by script?
Hi Phil,Based on your posts on other threads, you have a significant number of vPro clients. The most effective/efficient solution would be to use the remote configuration method. I understand that...
View ArticleRe: Automating Intel AMT MEBx Configuration
Hi RV,The only method for your situation of changing the MEBx password on thousands of machines is to perform a remote configuration and within the profile, changing the MEBx password and pushing out...
View ArticleClik here to view.
Re: AMT vulnerability
Hi Sean,My understanding from your post is that your goal is to not have to update the BIOS on 1500+ systems and that you have run the detection and mitigation tool for Intel SA-00075. While...
View ArticleClik here to view.
Boot Configuration
Have a server dropped off and it has boot up issues. Could someone send me to a link or something that tells me what the setup process is for booting up a Precision T5400 with two hard drives. Raid?...
View ArticleClik here to view.
Re: Disabling AMT
I have looked at your pdf link. It seems the 1.4.4 section you referenced says "To use this method, the Intel AMT device must have at least one active hashcertificate defined in the Intel MEBX. If the...
View ArticleClik here to view.
Re: Disabling AMT
Hi Phil,For remote configuration, a specific AMT certificate from one of the certificate authorities is required. As mentioned in the previous post, there is only one way to perform a remote...
View ArticleRe: Boot Configuration
Hello Geaux2u,I understand that you need assistance to setup the booting process of your Dell* Precision T5400.Regarding that, I would strongly recommend you to contact Dell for further assistance...
View Article