|
Intel Active Management Technology (AMT) is hardware and firmware technology for remote out-of-band management of personal computers,〔(【引用サイトリンク】url=http://www.tomshardware.com/reviews/command-conquer,1591.html )〕〔(【引用サイトリンク】url=http://www.crn.com/white-box/201802550 )〕〔(【引用サイトリンク】url=http://www.crn.com/hardware/209100230?queryText=vPro )〕 in order to monitor, maintain, update, upgrade, and repair them.〔 Out-of-band (OOB) or hardware-based management is different from software-based (or in-band) management and software management agents.〔〔 Hardware-based management works at a different level than software applications, uses a communication channel (through the TCP/IP stack) that is different from software-based communication (which is through the software stack in the operating system). Hardware-based management does not depend on the presence of an OS or locally installed management agent. Hardware-based management has been available on Intel/AMD based computers in the past, but it has largely been limited to auto-configuration using DHCP or BOOTP for dynamic IP allocation and diskless workstations, as well as Wake-on-LAN (WOL) for remotely powering on systems.〔(【引用サイトリンク】url=http://arstechnica.com/articles/paedia/hardware/vpro.ars/1 )〕 AMT is not intended to be used by itself; it is intended to be used with a software management application.〔 It gives a management application (and thus, the system administrator who uses it) better access to the PC down the wire, in order to remotely and securely do tasks that are difficult or sometimes impossible when working on a PC that does not have remote functionalities built into it.〔〔〔(【引用サイトリンク】url=http://mediaproducts.gartner.com/reprints/intel/153886.html )〕 AMT is designed into a secondary (service) processor located on the motherboard, and uses TLS-secured communication and strong encryption to provide additional security.〔 AMT is part of the Intel Management Engine, which is built into PCs with Intel vPro technology.〔(【引用サイトリンク】url=http://softwarecommunity.intel.com/articles/eng/1032.htm )〕 AMT has moved towards increasing support for DMTF Desktop and mobile Architecture for System Hardware (DASH) standards and AMT Release 5.1 and later releases are an implementation of DASH version 1.0/1.1 standards for out-of-band management.〔(【引用サイトリンク】title=Intel AMT implementation and reference guide )〕 AMT provides similar functionality to IPMI, although AMT is designed for client computing systems as compared with the typically server-based IPMI. Currently, AMT is available in desktops, servers, ultrabooks, tablets, and laptops with Intel Core vPro processor family, including Intel Core i3, i5, i7, and Intel Xeon processor E3-1200 product family.〔〔https://msp.intel.com/find-a-vpro-system〕 == Features == Intel AMT includes hardware-based remote management, security, power-management, and remote-configuration features.〔〔(【引用サイトリンク】url=http://www.intel.com/technology/vpro/ )〕 These features allow an IT technician to access an AMT featured PC remotely.〔 Intel AMT is security and management technology that is built into PCs with Intel vPro technology.〔〔 PCs with Intel vPro include many other "platform" (general PC features) technologies and features. Intel AMT relies on a hardware-based out-of-band (OOB) communication channel〔 that operates below the OS level, the channel is independent of the state of the OS (present, missing, corrupted, down). The communication channel is also independent of the PC's power state, the presence of a management agent, and the state of many hardware components (such as hard disk drives and memory). Most AMT features are available OOB, regardless of PC power state.〔 Other features require the PC to be powered up (such as console redirection via serial over LAN (SOL), agent presence checking, and network traffic filtering).〔 Intel AMT has remote power-up capability. Hardware-based features can be combined with scripting to automate maintenance and service. Hardware-based AMT features on laptop and desktop PCs include: * Encrypted, remote communication channel for network traffic between the IT console and Intel AMT.〔〔 * Ability for a wired PC (physically connected to the network) outside the company's firewall on an open LAN to establish a secure communication tunnel (via AMT) back to the IT console.〔〔 Examples of an open LAN include a wired laptop at home or at an site that does not have a proxy server. * Remote power up / power down / power cycle through encrypted WOL.〔〔 * Remote boot, via integrated device electronics redirect (IDE-R).〔〔 * Console redirection, via serial over LAN (SOL).〔 * Keyboard, video, mouse (KVM) over network. * Hardware-based filters for monitoring packet headers in inbound and outbound network traffic for known threats (based on programmable timers), and for monitoring known / unknown threats based on time-based heuristics. Laptops and desktop PCs have filters to monitor packet headers. Desktop PCs have packet-header filters and time-based filters.〔〔 * Isolation circuitry (previously and unofficially called "circuit breaker" by Intel) to port-block, rate-limit, or fully isolate a PC that might be compromised or infected.〔〔〔 * Agent presence checking, via hardware-based, policy-based programmable timers. A "miss" generates an event; you can specify that the event generate an alert.〔〔〔 * OOB alerting.〔〔 * Persistent event log, stored in protected memory (not on the hard drive).〔〔 * Access (preboot) the PC's universal unique identifier (UUID).〔〔 * Access (preboot) hardware asset information, such as a component's manufacturer and model, which is updated every time the system goes through power-on self-test (POST).〔〔 * Access (preboot) to third-party data store (TPDS), a protected memory area that software vendors can use, in which to version information, .DAT files, and other information.〔〔 * Remote configuration options, including certificate-based zero-touch remote configuration, USB key configuration (light-touch), and manual configuration.〔〔〔(【引用サイトリンク】url=http://softwarecommunity.intel.com/articles/eng/1477.htm )〕 * Protected Audio/Video Pathway for playback protection of DRM-protected media. Laptops with AMT also include wireless technologies: * Support for IEEE 802.11 a/g/n wireless protocols〔〔〔(【引用サイトリンク】url=http://communities.intel.com/docs/DOC-1129 ) 〕 * Cisco-compatible extensions for Voice over WLAN〔〔〔〔 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Intel Active Management Technology」の詳細全文を読む スポンサード リンク
|