From 3358947e72deaefad5d501d240c958eb54f1f50b Mon Sep 17 00:00:00 2001 From: Don Koch Date: Wed, 22 Apr 2015 14:37:41 -0400 Subject: [PATCH] Added AMT documentation. --- amt.txt | 85 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 85 insertions(+) create mode 100644 amt.txt diff --git a/amt.txt b/amt.txt new file mode 100644 index 0000000..786cc1c --- /dev/null +++ b/amt.txt @@ -0,0 +1,85 @@ +AMT info +======== + +Currently used on the "huxelrebeX" Lenovo machines. + +Access to BIOS/AMT screens +-------------------------- + +From the console at boot time, hit enter during boot to get the +BIOS/boot screen, then: + For BIOS, hit the F1 key. + For the AMT, type in ctrl-P. + +From remote: + + BIOS access is done from VNC via the normal reboot cycle and + performing the above Enter/F1 sequence. The VNC password was set via + a wsman command below (whatever values was given for RFB_PASSWORD). + + AMT access is done via web access to: + http://:16882/ + login ID default is: admin + Note: connection from the machine in question may not work. + +AMT configuration via wsman +--------------------------- + +The sequence of wsman commands to enable KVM (via VNC) access +were gotten from: +http://blog.yarda.eu/2012/09/intel-amt-quickstart-guide.html + +A quick summary is: + +Fill in info: + AMT_HOST - Host IP (ssh port redirection works here) + AMT_PASSWORD - AMT access password from AMT setup + +Set the VNC access password: + + wsman put \ + http://intel.com/wbem/wscim/1/ips-schema/1/IPS_KVMRedirectionSettingData \ + -h AMT_HOST -P 16992 -u admin -p AMT_PASSWORD -k RFBPassword=RFB_PASSWORD + +where RFB_PASSWORD is the VNC access password and must be 8 chars including +upper- and lower-case letters, numbers and special characters. + +Enable KVM redirection to port 5900: + + wsman put \ + http://intel.com/wbem/wscim/1/ips-schema/1/IPS_KVMRedirectionSettingData \ + -h AMT_HOST -P 16992 -u admin -p AMT_PASSWORD -k Is5900PortEnabled=true + +Enable the KVM: + + wsman invoke -a RequestStateChange \ + http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_KVMRedirectionSAP \ + -h AMT_HOST -P 16992 -u admin -p AMT_PASSWORD -k RequestedState=2 + +Disable opt-in policy by: + + wsman put \ + http://intel.com/wbem/wscim/1/ips-schema/1/IPS_KVMRedirectionSettingData \ + -h AMT_HOST -P 16992 -u admin -p AMT_PASSWORD -k OptInPolicy=false + +You can also query the current settings: + + wsman get \ + http://intel.com/wbem/wscim/1/ips-schema/1/IPS_KVMRedirectionSettingData \ + -h AMT_HOST -P 16992 -u admin -p AMT_PASSWORD + +Note: After a reboot, the wsman commands might get a connection failure +error (code = 0). After letting the machine sit for some indeterminate +time, it decides to work. I suspect a timeout-reset that clears whatever +the problem is. + +See also: +--------- + +https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm + +https://software.intel.com/en-us/articles/download-the-latest-intel-amt-software-development-kit-sdk + +https://software.intel.com/sites/default/files/article/393789/amt-9-start-here-guide.pdf + +https://software.intel.com/en-us/articles/intel-active-management-technology-start-here-guide-intel-amt-10 -- 2.39.5