Test Case

Show / Hide direct link   <MAIN> 3628PA: Configure AMT device for Enterprise mode and import/export function test for PID/PPS - PP-80499



Version 1.8
Created on 02/03/2007 14:34:52  by Imthias Subaier
Summary
Preconditions
Status:   New
Priority:   Medium
BASIC INFORMATION
Section:S/W Test Require attachment:No
Team:Network Group:Configuration
Lessons Learned:No Phase:SIV (BBFV), SIT, SVT
Locations:Inhouse: AWS and Cambridge, Inhouse: AWS, Inhouse: Cambridge, Compal, Flextronics, Quanta, Wistron Owned By:Eiji Ogata/LENOVO
Objective:To confirm the relaibility
CRITERIA
Set up your client device for AMT ready
EUT QUANTITY
One system
EQUIPMENT
Network facility
Critical Attribute:[0] : ETN - Ethernet

CONFIGURATION
REFERENCE PROCEDURE
Plese refer detail section
STATISTIC INFO
Operating System Win81-64bit Win81-32bit Win10-32bit Win10-64bit Win7- 64bit Win7- 32bit Total
Test Points
Duration
Workload
# Step actions Win81-64bitWin81-32bitWin10-32bitWin10-64bitWin7- 64bitWin7- 32bit
1 Setting up configuring and managing Intel AMT 4.0 devices by Enterprise mode AAAAAA
2 Setting up configuring and managing Intel AMT 6.0 devices for Calpella systems AAAAAA
3 Installing agents on the device using LANDesk 8.7 AAAAAA
4 Installing agents on the device using LANDesk 8.8 AAAAAA
5 PID/PPS -- Import/Export function test AAAAAA
6 Provisioning using USB Key in Intel AMT Client Device AAAAAA
7 Procedure to Uninstall agent in client machine AAAAAA
DETAILS
ATTENTION!! Please follow below information.
1. Please check Error and Warning message in Event Viewer before you start the test case and after you complete the test case, and report it to your team lead, then arrange to open defect, if needed.

2. Perform All Test in Battery Mode (Some of the test items need to perform in AC Mode, follow each Test Case).

3. All Test Activity should be performed with AMT Enabled as Default (applicable on vPro enabled systems).

4. Please check Usability / Cosmetic issues (correct sentence/appropriate display/etc.) and open defect, if needed.


1. "Please check Error and Warning message in Event Viewer before you start the test case and after you complete the test case, and report it to your team lead."
2. "Perform All Test in Battery Mode (Some of the test items need to perform in AC Mode, follow each Test Case)"


(All Test Activity should be performed with AMT Enabled)

RESULT
Copy this section into the RESULT section of your report.

Test Items
Test Criteria/Expected
Configuration
Remarks



Test Item
Win XP
Vista
Win 7



DETAIL
Copy this section into the DETAIL section of your report.
1. "Please check Error and Warning message in Event Viewer before you start the test case and after you complete the test case, and report it to your team lead."

2. "Perform All Test in Battery Mode (Some of the test items need to perform in AC Mode, follow each Test Case)"

(All Test Activity should be performed with AMT Enabled)

RESULT
Copy this section into the RESULT section of your report.
Test Item
Win XP
Win 7
Win 8


For all the products supporting ME version 4.xx, Ctrl +P option will be shown during the temp.boot menu which can be launched by pressing F12 key during boot

For all the products supporting ME version 6.xx, Press ThinkVantage Button or press ENTER during POST to get the Ctrl + P option.


DETAIL
Copy this section into the DETAIL section of your report.
Setting up configuring and managing Intel AMT 4.0 devices by Enterprise mode [UR-1996DS]

1. At the LANDesk System Manager console, open the Configure Services Utility (Start | All Programs | LANDesk | LANDesk Configure Services). Click the Intel AMT Configuration tab. Under Current Intel AMT Credentials, enter the username(admin) and password(iAMT- 4.0) you will be using when you set up the new Intel AMT devices in the Intel AMT BIOS. If you want to use a different set of credentials to access the device after setup is complete, enter a username and password under Provision with new Intel AMT Credentials. Click Provision in TLS mode, then click OK.
Note: While you could manage devices in Enterprise mode and select non-TLS security, it is not recommended that you do so.

2. Open the LSM console (Start | All Programs | LANDesk | LANDesk System Manager). Click Hardware Configuration | AMT | Provisioning | Generate AMT ID, and generate one or more PID/PPS pairs. When they are generated, print the list of key pairs for use in setting up the device (see step 9).

3. On the Intel AMT system, Press F1 during boot up to go to BIOS Setup Utility, make sure BIOS is latest.

4. Go to Config-->Intel(R) AMT-->Intel(R) AMT Control, make sure it is ENABLED


5. Press ThinkVantage Button or press ENTER during POST to get to the Ctrl + P option. Once inside the iMEBx screen, confirm that iMEBx version is latest.

3. On the Intel AMT device, start the ME BIOS (press Ctrl-P as the device boots). This should be near the end of POST.

4. If you have never configured the device, enter the default password "admin". Change the password - this is required. Use "iAMT-4.0" so that everyone share the same password for our test.
5. Select Intel(R) ME Configuration | Intel(R) ME Features Control | Manageability Feature Selection and choose Intel(R) AMT.

6. Back to MAIN MENU and select Intel(R) AMT Configuration.

7. If the device has been previously managed or its previous state is unknown, then fully un-provision it.

8. Select Host Name and input a same name as a computer name of Windows.In TCP/IP, keep the DHCP Enabled and enter domain name if available.

9. Ensure that Enterprise mode is selected as the Provisioning Model (this is the default Intel AMT setting).

10. Go to Setup and Configuration. Here Check Current Provisioning Mode. Check Whether its PSK or PKI.

11. Check Provisioning Record. Check this after all Enterprise mode configuration is completed.

12. For the Provisioning Server details, enter the IP address of the LSM core server and port 9971.

13. Go to TLS PSK--> Delete PID and PPS** if previously system was configured for Enterprise mode.Set PID and PPS**. Enter a PID/PPS pair from the list that you printed. (Be sure that you use a unique PID/PPS pair for each device.)

14. To Configure Enterprise mode with TLS PKI, follow the below procedure. (Below Feature requires new version of Landesk. Current Version of Landesk does not support configuring TLS PKI. Please skip to step 18)

15. Go to TLS PKI-->Remote Configuration Enable/Disable ** . Change it to Enabled.

16. Manage Certificate Hashes. Add the new Certificate Hashes generated here. Make it Active.

17. Set FQDN( Fully Qualified Domain Name) of the Provisioning Server if server in domain.

18. Set PKI DNS Suffix and Return to Previous Menu

19. Ensure that following is selected as the SOL/IDE-R.
- Username & Password ENABLED
- Serial Over LAN ENABLED
- IDE Redirection ENABLED

20. Go to Password Policy. Try Selecting all the options available. Default Password only, During Setup and Configuration and Anytime. Make sure all the 3 functions are working correctly

21. Go to Secure Firmware Update. Make sure its Enabled.

22. Set PRTC in the format mentioned (YYYY:MM:DD:HH:MM:SS) . Make sure the date and time matches that of the server.

23. Set Idle Timeout. Here enter any value between 1-65535.

24. Return to Previous Menu and Exit AMT page.

Verify that "Intel AMT is configured and running" message is displayed during POST. If you see "Intel AMT is not configured." message during POST, please reboot again and verify the "not" message goes away. (you will need to reboot twice.)

Setting up configuring and managing Intel AMT 6.0 devices for Calpella systems [UR-2471]

1. At the LANDesk System Manager console, open the Configure Services Utility (Start | All Programs | LANDesk | LANDesk Configure Services). Click the Intel AMT Configuration tab. Under Current Intel AMT Credentials, enter the username(admin) and password(iAMT- 6.0) you will be using when you set up the new Intel AMT devices in the Intel AMT BIOS. If you want to use a different set of credentials to access the device after setup is complete, enter a username and password under Provision with new Intel AMT Credentials. Click Provision in TLS mode, then click OK.

2. Open the LSM console (Start | All Programs | LANDesk | LANDesk System Manager). Click Hardware Configuration | AMT | Provisioning | Generate AMT ID, and generate one or more PID/PPS pairs. When they are generated, print the list of key pairs for use in setting up the device (see step 22).

[UR-2742]
3. On the Intel AMT system, Press F1 during boot up to go to BIOS Setup Utility, make sure BIOS is latest.

4. Go to Config-->Intel(R) AMT-->Intel(R) AMT Control, make sure it is ENABLED

5. On the Intel AMT device, start the ME BIOS (press Ctrl-P as the device boots). This should be near the end of POST.

5. Press ThinkVantage Button or press ENTER during POST to get to the Ctrl + P option. Once inside the iMEBx screen, confirm that iMEBx version is latest.

6. If you have never configured the device, enter the default password "admin". Change the password - this is required. Use "iAMT-6.0" so that everyone share the same password for our test.

7. The following options should be seen in the main menu: Intel(R) ME General Settings, Intel(R) AMT Configuration

8. Select Intel(R) AMT Configuration.

9. The following options should be seen: Manageability Feature Selection, SOL/iDER, KVM Configuration.

10. Select Manageability Feature Selection.

11. Press Y when caution message shows "Disabling resets network settings including network ACLs to factory defaults. System resets on MEBx exit. Continue:(Y/N)" and choose Enabled.

12. Select SOL/iDER, ensure that the following is selected:
- Username & Password ENABLED
- SOL ENABLED
- IDER ENABLED
- Redirection Mode DISABLED --> Redirection Mode must be enabled when using a legacy SMB Redirection Console

13. Back to MAIN MENU and select Intel(R) ME General Settings.

14. The following options should be seen: Intel(R) ME State Control, Change ME Password, Password Policy, Network Setup, Activate Network Access, Remote Setup and Configuration, FW Update Settings, Set PRTC, Power Control

15. Go to Password Policy. Try Selecting all the options available. Default Password only, During Setup and Configuration and Anytime. Make sure all the 3 functions are working correctly

16. If the device has been previously managed or its previous state is unknown, Unconfigure Network Access is also shown in Intel(R) ME General Settings,
unprovision by following the steps:
Unconfigure Network Access | "Resets network settings including network ACLs to factory defaults. System resets on MEBx exit. Continue:(Y/N)", choose Y | "Reset Intel(R) AMT Provisioning: (Y/N)", choose Y | Select Full Provision.

17. Select Intel(R) ME State Control and choose Enabled.

18. Select Remote Setup and Configuration.

19. The following options should be seen: Current Provisioning Mode, Provisioning Record, RFCG, Provisioning Server IPV4/IPV6, Provisioning Server FQDN, TLS PSK, TLS PKI

20. Check Current Provisioning Mode. Check whether its PSK or PKI.

21. Check Provisioning Record. Check this after all configuration is completed.

22. For the Provisioning Server IPV4/IPV6 details, enter the IP address of the LSM core server and port 9971.

23. Go to TLS PSK--> Delete PID and PPS** if previously system was configured. Set PID and PPS**. Enter a PID/PPS pair from the list that you printed. (Be sure that you use a unique PID/PPS pair for each device.)

24. To configure system with TLS PKI, follow the procedure below.

25. Go to TLS PKI, the following options should be seen: Remote Configuration **, PKI DNS Suffix, Manage Hashes

26. Select Remote Configuration Enable/Disable **. Change it to Enabled.

27. Manage Certificate Hashes. Add the new Certificate Hashes generated here. Make it Active.

28. Go to Provisioning Server FQDN, set FQDN (Fully Qualified Domain Name) of the Provisioning Server if server in domain.

29. Return to Previous Menu.

30. Set PRTC in the format mentioned (YYYY:MM:DD:HH:MM:SS) . Make sure the date and time matches that of the server.

31. Select Power Control, the following options should be seen: Intel(R) ME ON in Host Sleep States, Idle Timeout

32. Set Idle Timeout. Here enter any value between 1-65535.

33. Return to Previous Menu and Exit AMT page.

Verify that "Intel AMT is configured and running" message is displayed during POST. If you see "Intel AMT is not configured." message during POST, please reboot again and verify the "not" message goes away. (you will need to reboot twice.)

Put the AMT machine into the inventory on LANDesk Server Manager
  1. Select Start | All Programs | LANDesk | LANDesk Management Suite.
  2. Click Tools | Configuration | Umanaged Device Discovery.
  3. Click Intel AMT. Your AMT device that you set up on the step 3 will be listed.
  4. Right click the device and select Move to Inventory Database.
  5. You may need to refresh screen.

Comfirm that the AMT device is properly managed.
  1. Select Start | All Programs | LANDesk | LANDesk System (or Server) Manager.
  2. Confirm that the Device type is set as AMT.

Installing agents on the device using LANDesk 8.7

14. Open the LANDesk Management Suite console (Start | All Programs | LANDesk | LANDesk Management Suite 8) and select Tools | Configutation | Agent configuration, Click New button of Agent configuration and select System Manager. Check Install monitoring and type a name in Configuration name field, click Save. Right-click the agent and select Set as default.

15. At the Intel AMT device, map a drive to the core server and attach to the ldlogon share. Run wscfg32.exe to install the LSM and LDMS agents. Make sure Monitoring is selected in the agent configuration, then click Install.


Installing agents on the device using LANDesk 8.8

Step 1:Create an agent configuration
  1. Open the LANDesk Management Suite console, click Tools | Configuration | Agent configuration.
  2. Click the New toolbar button.
  3. Enter a Configuration name.
  4. Select Alerting. Click Add. Add all rulesets and click OK.
  5. Select Agent watcher. Click Use the Agent Watcher checkbox on. Click Configure. Click New. Click all the checkboxes. Set Interval to check 31 seconds. Then click OK. Click Use selected.
  6. Select System Manager. Click Install monitoring.
  7. Click Save.
  8. Right click on the created agent and select Set as default.

Step 1:Locate the wscfg32.exe
  1. From the client machine, locate and run %server%\\LDLOGON\WSCFG32.EXE.
  2. On the Agent Configuration Utility window, confirm the monitoring component is turned on, then click Install.

16. At the LANDesk Management Suite console, select Network View | LDMS-SERVERNAME | Devices | All devices and verify the AMT device is listed.
NOTE: If Type of the AMT system is Intel AMT PC, click Start | All Programs | LANDesk Management | Inventory Scan on your AMT device.

PID/PPS -- Import/Export function test

PID/PPS -- Import/Export function test using LANDesk 8.8
1. At the Landesk Management Suite, select Configure | Intel vPro options | ID Generation
2. Generate Intel vPro AMT IDs window will appear.
3. Enter Number of IDs to generate.
4. Enter PID Prefix for generated IDs.
5. Enter Batch name of generated IDs.
6. Click Generate IDs.
7. Message will appear "Successfully generated 2 vPro IDs." and click OK.
8. PIDs and PPS will be listed based on the entered values.

Test Item Check Item/Criteria WXP Win 7 Win 8
Import Test
Import PIDs from Local Disk [UR-2371]
1. Click Import/Export IDs button
2. Select "Import from USB key file"
3. Specify the location for setup.bin by clicking Browse button.
4. Locate setup.bin file from Local Disk.
5. Click OK and Apply button.
6. Message should appear: "The import was successful."
7. Click OK
8. Go back to Generate Intel vPro AMT IDs window.
9. View Batch IDs
10. PIDs and PPS imported from Local Disk will be viewed.
- Validate that the setup.bin file imported from Local Disk is viewed in Generate Intel vPro AMT IDs window
Import PIDs from USB key
1. Click Import/Export IDs button
2. Select "Import from USB key file"
3. Specify the location for setup.bin by clicking Browse button.
4. Locate USB key drive and setup.bin file.
5. Click OK and Apply button.
6. Message should appear: "The import was successful."
7. Click OK
8. Go back to Generate Intel vPro AMT IDs window.
9. View Batch IDs
10. Select "fromUSB"
11. PIDs and PPS imported from USB key will be viewed.
- Validate that the setup.bin file imported from USB key is viewed in Generate Intel vPro AMT IDs window with Batch Name "fromUSB"
1- at core, open command prompt
2- goto ldmain folder
3- type, getamtid
make surethat the content of pid/psk is the same as when typing amtusbfile -dv
1- at core, open command prompt
2- goto ldmain folder
3- type, amtusbfile -dv
validate if the file setup.bin(saved at ldmain by default) has the same number of pid/psk as in DB
Export Test
Export PIDs in Local Disk - UR-2371
1. Click Import/Export IDs button.
2. Select "Export AMT IDs to setup.bin file (0 out of 12 IDs are available for export)"
3. In Specify Intel vPro ME password (AMT v2.5 or greater), type password similar to ME password set in ME BIOS. (Optional)
4. Type Number of IDs to export.
5. Specify the location for setup.bin by clicking Browse button.
6. Save it to local disk.
7. Click Apply button.
8. Import/Export vPro IDs window will show message: "Setup.bin was successfully created."
9. Click OK.
- Validate if there is setup.bin file created in the specified location in local disk.

Export PIDs in USB key
1. Click Import/Export IDs button.
2. Select "Export AMT IDs to setup.bin file (0 out of 12 IDs are available for export)"
3. In Specify Intel vPro ME password (AMT v2.5 or greater), type password similar to ME password set in ME BIOS. (Optional)
4. Type Number of IDs to export.
5. Specify the location for setup.bin by clicking Browse button.
6. Save it to USB key drive.
7. Click Apply button.
8. Message will prompt: "You specified <number> IDs to export from the management database. 0 IDs are currently available. Do you want to generate the additional <number> IDs needed before exporting?"
9. Click Yes
10. Import/Export vPro IDs window will show message: "Setup.bin was successfully created."
11. Click OK and Close.
12. On Generate Intel vPro AMT IDs window > View batch IDs drop down box, select "fromUSB"
13. PIDs should be listed with "fromUSB" Batch names.
- Validate if there is setup.bin file created in USB key drive.
1- plug in usb drive to AMT machine(C1)
2- unprovision AMT(switch jumper)
3-switch jumper back to normal, reboot AMT
4- after AMT booted up, reboot again, during reboot, press F2 to go in to BIOS
5- at bios, go to Intel(R) ME
6- fill in the correct password, then you will also fill in Computer Name, set AMT to AMT/Enterprise mode,
TCP/IP configuration, Provisioning server, SOL/IDER configuration
7- go back to core, click on, Device discovery\Intel AMT,

1- Verify that your AMT machine appears here
1- plug in usb drive to AMT machine(C1)
2- unprovision AMT(switch jumper)
3-switch jumper back to normal, reboot AMT
4- after AMT booted up, reboot again, during reboot, press F2 to go in to BIOS
5- at bios, go to Intel(R) ME
6- fill in the correct password, then you will also fill in Computer Name, set AMT to AMT/Enterprise mode,
TCP/IP configuration, Provisioning server, SOL/IDER configuration
7- go back to core, open DB\UNMANAGEDNODES
1- Verify that there is a record for your amt machine at this table.
1- plug in usb drive to AMT machine(C1)
2- unprovision AMT(switch jumper)
3-switch jumper back to normal, reboot AMT
4- after AMT booted up, reboot again, during reboot, press F2 to go in to BIOS
5- at bios, go to Intel(R) ME
6- fill in the correct password, then you will also fill in Computer Name, set AMT to AMT/Enterprise mode,
TCP/IP configuration, Provisioning server, SOL/IDER configuration
1- Verify that you do NOT need to fill in PID/PSK. There is no where to find pid/psk to type in.
1- plug in usb drive to AMT machine(C1)
2- unprovision AMT(switch jumper)
3-switch jumper back to normal, reboot AMT
4- after AMT booted up, reboot again, during reboot, press F2 to go in to BIOS
5- at bios, go to Intel(R) ME
1- Verify if you can type in with the same password as the core has(Landesk configure services\intel AMT configuration)


Provisioning using USB Key in Intel AMT Client Device - UR-2541
Test Item Check Item/Criteria WXP Win 7 Win8
0. Export PIDs to USB key (Please refer to the Export PIDs in USB key portion of this test case).
1. Attach USB into Intel AMT client device's USB port.
2. Boot system.
3. Upon reaching POST, message will show:
"Found USB Key for provisioning Intel(R) AMT
Continue with Auto Provisioning (Y/N)"
4. Press Y key in system's keyboard.
5. Wait 25 to 30 seconds until message will show:
"Intel(R)AMT Provisioning complete
Press any key to continue with system boot..."
6. Press any key to boot system to OS.
- No error should appear in POST after performing USB key provisioning
- System may able to connect to Intel AMT machine (LANDesk Server).


Procedure to Uninstall agent in client machine:

Locate the UninstallWinclient.exe
  1. From the client machine, locate and run %server%\\LDMAIN\UninstallWinclient.exe
OTHER DETAILS
EUT Quantity : One system 1. "Please check Error and Warning message in Event Viewer before you start the test case and after you complete the test case, and report it to your team lead."
2. "Perform All Test in Battery Mode (Some of the test items need to perform in AC Mode, follow each Test Case)"
(All Test Activity should be performed with AMT Enabled)
Test Item
Win XP
Vista
Win 7

TEMS Reviewer Log:03/05/2007 10:25:55 AM by Kazuo 1 Matsumoto/Japan/Lenovo/IDE (Review Comment: OK
Review Logs
Keywords:   None
Requirements :   None
Attached files :

Update History:
This document is not yet modified.