Skip to main content

Integrate Intel AMT Features in SureMDM

SureMDM facilitates out-of-band management using Intel's Active Management Technology (AMT) system, specifically designed for devices leveraging the Intel vPro® platform. This integration streamlines the management of Intel® Active Management Technology devices, leading to enhanced performance, heightened security, and streamlined device lifecycle management. This collaboration harnesses the capabilities of Intel AMT to bring a host of advanced features directly into the SureMDM ecosystem.

note

Intel AMT feature is available only for Enterprise licenses.

SureMDM currently supports the following Intel® AMT features:

  • Remote Power/Boot Control: Remotely power on, wake, or reboot Intel® AMT-enabled devices with options to change the boot order.

  • Hardware Inventory: Get hardware information (BIOS features, CPUs, memory, etc.).

  • Event/Audit Logs: Create a configurable list of auditable Intel® AMT actions performed by users and admins. 

  • Full KVM (Keyboard, Video, and Mouse) Remote Control: Remotely control and troubleshoot your devices easily, either over a wired or a wireless connection.

Activate Intel AMT features in SureMDM​

Following steps are involved in activating Intel AMT features in SureMDM:

Configure Intel AMT settings​

  1. On the SureMDM Web Console, navigate to Settings (icon located at the top right of the screen) >  Account Settings > Enterprise Integrations > Intel® AMT Integration .

  2. Select Enable Intel® AMT Device Management and click Apply.

Create Intel AMT Configuration Job​

  1. Go to Jobs > New Job > Windows > Intel AMT Configuration. 

  2. On the Intel AMT Configuration prompt, configure the following settings and click Save.

    The newly created job will be listed in the Jobs List section.

Apply the created job on Windows device(s)​

  1. On the SureMDM Web Console, navigate to the Home tab and select the Windows device(s) from the Device Grid.

  2. Click Apply to launch the Apply Job/Profile To Device prompt.

  3. On the Apply Job/Profile To Device prompt, select the created AMT job and click Apply.

  4. Once the job is deployed successfully, the Intel AMT feature in SureMDM would be available for the selected Windows devices.

  5. Select the Windows device and click the Refresh from the Dynamic Jobs menu, located at the top-right of the console. 

  6. Select the Intel AMT  job from Dynamic Jobs section to launch the Intel AMT out-of-band web console.

Features available in the Intel AMT out-of-band console​

Following features are available in the Intel AMT out-of-band console:

Intel AMT Status – This option displays the status of the firmware, following active features on the machine.

  • Power – Power On/Off
  • Name and Domain – Name and domain of the device
  • Intel ME – Version activated in Admin Control Mode (ACM)
  • Active Features – Redirection Port, Serial-over-LAN, IDE-Redirect, KVM
  • Remote Desktop – Primary display, Session Timeout
  • User Consent 
  • Power Policy 
  • Date and Time

Power Operations – IT admins have options to power up to BIOS level and OS level. Different power operations supported by Intel AMT are:

  1. Hardware Power control
  • Power UP
  • Power Down 
  • Power Cycle 
  • Reset 
  1. OS Power Control
  • Sleep 
  • Hibernate 
  • Shutdown 
  • Restart 
  1. Boot Control
  • Network Boot (PXE) Power
  • Network Boot (PXE) Reset
  1. BIOS Control
  • Power UP to Setup Utility 
  • Reset to Setup Utility 
  • Remote Desktop – This option will start a remote session on the machine’s desktop. Admins will be able to use the keyboard and mouse to control events on the remote screen.
  • Hardware Inventory – This option will display the details about Platform, Baseboard, BIOS, Processors, Memory Modules and Storage Media.
  • Access Inventory – This option will display the event audit logs of users and hardware.