Hi everyone again,
This is the scenario that I want to test next week:
In the servers side, I am going to suppose that I have got the intel certificate client installed in all my landesk core servers. Also, I have no the dns register "provisionserver" because it is not necesary. And the strong password configured in the Intel Vpro Options inside Landesk Console, of course. Nothing more here.
In the devices side, all my devices have the landesk agent installed, if I go to the folder C:\Program Files\LANDesk\LDClient
and I execute AMTConfig.exe (with administrators rights), what does will happen?
Is it possible that in this way the device send the "hello" packet to its landesk core server?
and if it so, the provisioning process will does start? and the device at the end will be provisioning?
Please, I need some help from the landesk engineering side. Thanks very much.
Are your Landesk core servers standalones in there seperate Domains? Or do you have one Main and the rest are Replicated?
When we did our vpro we had a certificate from Go Daddy and had provisionserver as a alias in our DNS on our Domain Controller.
we have four landesk core server in the same domain,
also we have about 8000 devices distributed in these four servers, computer1.mydomain.net, computer2.mydomain.net ...and so on.
All devices have the landesk agent.
So in this point we want activate vpro in all devices.
The dns register "provisionserver" it is not possible here because we have 4 provisioning servers.
We have thought, install godadday certificate in the 4 landesk core servers, activate intelvpro password in the four servers, and go on, the provisioning process has to start with nothing more.
I think the landesk agent in the device is aware that it is running in a amt hardware,
then the landesk agent will send a "hello" packet to its landesk core server and provisioning process should start.
Could be this way?
Thanks very much four your help.
AMT Vpro is a Intel product that is put in the bios of computers.
I understood that when the computers sent hello packets they would call out Provisionserver. Then in your DNS there would be a Alais set for Provisionserver pointing to the Landesk server holding the certificate.
Usually there is a Domain Controller Server in each Subnet with DNS turned on. Each of your cores I assume are in a different subnet.
This part is a little more then my knowledge.
If your cores only service certain computers then you'll have to talk to Server people.
If all the cores service all the computers then you only need one core to be the provisionserver.
1 of 1 people found this helpful
with my current configuration, multiple landesk servers in the same domain, and all my devices with landesk agent, ( devices are distributed in 4 landesk servers ),
if I don't want touch all devices, ZeroTouch with certificate is the only way.
steps to do:
- install certificate in all landesk servers
- define intel vpro password in landesk console
and nothing more, the provisioning should start.
Here this images show how the remote configuration is done with local agent.
I hope your comments.
I have never seen this documentation. Did it come from Landesk or Intel?
yes of course, the documentation comes from Intel.
Intel AMT Implementation and Reference Guide:
in this Intel page you have to surf to:
and the other table, 3 Hello packets: