Product guide

Prerequisites for using wireless with ePO Deep Command
Consider these guidelines while performing Intel
®
AMT actions on the wireless clients.
• Intel
®
AMT over wireless requires the infrastructure to support WPA or WPA2 wireless security.
• For Admin profiles, Temporal Key Integrity Protocol (TKIP) or Counter mode CBC MAC Protocol
(CCMP) encryption algorithms must be used. For user profiles, encryption is not mandatory.
• The wireless profile settings must be applied to the Intel
®
AMT systems. See Create a configuration
profile using RCS.
• When a wireless client is powered-off, the connection is established using the wireless settings in
Management Engine without a need of operating system interface.
• Intel
®
AMT system must be configured to use DHCP. For Intel
®
AMT to work with a wireless LAN, it
must share IP addresses with the host.
• Desktop platforms must have an onboard wireless adapter.
• The maximum out-of-band speed for the Intel
®
MEI is 40 Mbps.
Wireless profiles
A wireless profile contains names, passwords, and other security elements to authenticate the system
to the wireless Access Point.
These two types of wireless profiles are used for Intel
®
AMT management:
• Admin profiles — Added by an administrator during the configuration profile creation on an Intel
®
RCS system. These profiles are created using TKIP or CCMP with minimum WPA encryption. They
can be viewed from Intel
®
AMT web interface.
• User profiles — Created by the user or defined by a script or installation procedure. These profiles
can be created using the WEP encryption or without any encryption. They're not viewable from
Intel
®
AMT web interface.
When a new wireless network is detected, Intel
®
PROSet or the Intel
®
Management and Security
Status application (IMSS) displays a message to synchronize the currently active profile with Intel
®
AMT. The wireless driver transfers the profile and Intel
®
AMT saves it as a user profile.
Make sure that your system is not set to block Intel
®
PROSet pop-up messages.
Wireless profile synchronization
A wireless profile are synchronized between the Intel
®
Manageability Engine and the operating system
on certain events to allow Intel
®
AMT management.
An Intel
®
AMT wireless profile is updated when:
• A system is connected to a new wireless network.
• Currently connected profile is pushed to Intel
®
Manageability Engine.
• Intel
®
PROSet driver has been reset or updated.
• A wireless password has changed. An admin profile synchronizes automatically during the
maintenance task or delta configuration task. A user profile has to be reset manually.
6
Enabling Intel AMT wireless manageability
Prerequisites for using wireless with ePO Deep Command
64
McAfee ePO Deep Command 2.1.0 Product Guide