IAMT Scan v0.3.1.1 Use Guide

8/16/2019 IAMT Scan v0.3.1.1 Use Guide

1/19

/ / / EDS TECHNICAL DOCUMENT

The identifcation and activation o vPro systems that are not remote confguration capable

and that have not completed the provisioning/activation process prior to being placed in the

feld can be a daunting task in a large enterprise environment. Especially in the common

situation where vPro systems have been deployed beore backend inrastructure is in place.

To help address these challenges, and other activation issues, a script/tool package is

available to assist in automating the identifcation o such systems, as well as acilitating

automated data collection process enterprise wide, known as iAT !can.

"hallenges associated with activating these now dormant vPro devices.

#. The $hello packet% process must be restarted i more than &' hours has passed and

the system is still un(provisioned since the system was plugged into power. There

several di)erent ways to accomplish this.

a. Powering o) the system and pulling the power cord *and the battery in the

case o a laptop+ and then plugging the system back in.

b. Package and deploy the Activator tility *ormerly known as the -emote

"onfguration Tool *-"T++ on the local system. To restart the hello packets, the

synta is

c:\activator /s http: /h | /d

0nce the $hello packet% process is restarted, the system should contact the provision

server, be identifed by its ully 1ualifed domain name *2345+, receive its

provisioning profle and complete the provisioning/activation process.

&. 6ntel 7E"6, 8! and 5! 4rivers must be updated to current versions supported by

your 0E, in order to successully use Activator within the 9indows environment.

:. 6t is also recommended to update the 6ntel; AT frmware or system


2/19


7ere is the high level overview o how iAT !can can help address these challenges,

troubleshoot other activation issues, and assist in automating the identifcation o such

systems, as well as acilitating automated data collection process enterprise wide.

Process Overview:iAT !can was created with the ollowing criteria in mind

#. s E6520965.ee and by wrapping it into a new eecutable thatcaptures its output and writes this data back into the windows registry, iAT !can canprovide a custom set o inventory data that is now available or capture remotely by anygiven anagement "onsole, script, or other processes.

&. sing the sotware delivery capabilities built into !!, Altiris, or others, you can nowdeliver this new tool package remotely and silently to the P" environment providingcritical planning data back to the central console.

:.


3/19


Using !e "##:

All o the data that iAT !can generates is stored in the local system registry

HKEY_LOCAL_MACHINE\SYSTEM\INTEL\iAMT SCAN DATA

"onsisting o the 2ollowing !tring ?alue Entries AMTSetupStatus ( Provisioning !tate o the anagement Engine AMTersion @ AT ?ersion AssetTag @ 6normation rom the 45! entry

As you can see, there is a substantial amount o data generated that can be useul inplanning and troubleshooting your vPro activation. 7ere we will discuss how to interpret thedata by frst eamining what the tool does once eecuted.

9hen eecuted or the frst time, the iamtscanCvD.:.#.#.ee process creates two fles in thelocal TEP directory, iamtscanCvD.:.#.#.vbs and 6ntel>s E6no965.ee.iamtscanCvD.:.#.#.vbs is a "ontrol !cript written in ?isual


4/19


E6no965.ee does re1uire the 6ntel 7E"6 driver or 9indows to be in place in order toreturn ull detail, but iAT !can will continue to return a subset o the inormation despitethe missing driver, and again this is useul in determining whether or not the P" is capableo activation using the Activator tility to restart the provisioning process. The remainingfelds will be present, but contain no value. s odel

D$CPServer ( IP A""ress o) !e D$CP Server !#%e#se w#s o#ine" )ro*

!erial5umber ( achine>s !erial 5umber

DNSServerOr"er ( DNS Se#rc! Or"er !!!ite"ode ( !! !ite the local machine is managedby *i available+

DNS5/6DN + /&%%- 6%i7e" DNS n#*e o) !e !os#"#'er

!ystem5ame @ 7ost machine name

G#ew#- + G#ew#- ro&er IP A""ress 64 @ The !ystems 64

$ECIVersion ( $ECI Driver Version Provision!erverPing ( Ping status or $provisionserver%

MAC + AMT C#'#%e $OST MAC A""ress

IPA""ress ( C&rren IP A""ress o) $os # i*e o)sc#n

4MSVersion ( 4MS Driver Version

M#2e ( M#n&)#c&rer

Mo"e% + M#n&)#c&rer8s Mo"e%

Seri#%N&*er ( M#c!ine8s Seri#% N&*er

SMSSieCo"e ( SMS sie !e s-se* is #ssigne" oi) #v#i%#%e


5/19


6/19


De'%o-*en: The iAT !can eecutable is package ready and re1uires no additional parameters toperorm simply leverage your eisting sotware distribution, hardware inventory, andreporting processes to achieve results. A typical deployment consists o the preparing yourmanagement console to receive the custom inventory data, distributing and eecuting the

utility, and then scheduling an inventory scan o the targeted machines that will collect thisdata rom the systems registry. 0nce this data has been populated into the managementconsole, you can now use the "onsole>s reporting eatures to generate reports based on thiscustom inventory. An eample would be to report all 4ell F==>s that have no 7E"6 driver inplace or all 7P dcFGDD>s at a particular AT version and then plan a distribution to install theprere1uisite drivers and frmware. Please reer to your 6!? documentation on how todistribute sotware, inventory custom registry data, and build custom reports.


7/19


Use c#se e


8/19


A''en"i


9/19



10/19


,. E


11/19


C. 6&ic2 Ti's )or co%%ecing iAMT Sc#n Regisr- V#%&es

• 4ANDes2:

The inventory scanner is capable o scanning or any registry key. The

ollowing procedure should be used to confgure the inventory scanner to scan

or additional registry keys. *see link above+

#. 0n the core server, modiy the cProgram

2iles8A54eskanagement!uiteldlogonldappl:.template with a tet editor,

such as 5otepad.

&. 2ind the section called -egistry 6no.

:. Add a new line using this synta

2,345A-1, PAT%56 5A-1,56 5I&,&T"73 !7A%5

where Q?A8E PAT7Q is the path where the registry value is located *i.e.

7N8!otware+ Q?A8EQ is the name o the value that you would like 8A54esk

to scan *i.e. y?alue+ Q65?E5T0-O


12/19


13/19


• SMS =003

Oou can etend hardware inventory by editing the smsCde.mo fle using a

tet editor. 0n the primary site server computer, navigate to

\in0oes\cliles=src\hinv\ss)de=o

and copy the ollowing data into the end o the fle using notepad. !ave and

compile the edited fle. The fle must be compiled by using the ocomp.ee

command on each !! "lient, as in this eample Mocop=ee

\SMS)de=o

//4444444444444444444444444444444444444444444444444444444444

44444444

// #reate naespaces or iAMT Scan Data used 0$ the Inventor$ Agent

//4444444444444444444444444444444444444444444444444444444444

44444444

?praga naespace@\\\\=\\root\\#IMBC

?praga deleteclass@Intel)iAMT)S#A&)DATA6 &"'AI-C

D3&P7"PSE

class Intel)iAMT)S#A&)DATAF

.e$E

string 2e$&ae49

string AMTMac9

string AMTSetupStatus9

string AMTersion9

string AssetTag9

string !I"Sersion9

string #hassisT$pe9

string D%#PServer9

string D&SServer"rder9

string '(D&9

string D&S)'(D&9

string *ate+a$9string %,#Iersion9

string MA#9

string IPAddress9

string -MSersion9

string Ma.e9

string Model9

string ProvisionServerPing9

string Serial&u0er9

string Su0netMas.9

string S$ste&ae9

string 1&Sersion9

string SMSSite#ode9

string SMSManageentServer

string 11ID9

G9


14/19


D3&P7"PSE

instance o Intel)iAMT)S#A&)DATA

F

2e$&ae4Intel iAMT S#A& DATA9

Propert$#ontet@local|%2,3)-"#A-)MA#%I&,\\S3ST,M\\Intel\\iAMT S#A& DATA|

AMTMacC6D$naic6 Provider@7egPropProvCE AMTMac9

Propert$#ontet@local|%2,3)-"#A-)MA#%I&,\\S3ST,M\\Intel\\iAMT S#A& DATA| AMTSetupStatusC6D$naic6 Provider@7egPropProvCE AMTSetupStatus9


AMTersionC6D$naic6 Provider@7egPropProvCE AMTersion9


AssetTagC6D$naic6 Provider@7egPropProvCE AssetTag9


!I"SersionC6D$naic6 Provider@7egPropProvCE !I"Sersion9


#hassisT$peC6D$naic6 Provider@7egPropProvCE #hassisT$pe9


D%#PServerC6D$naic6 Provider@7egPropProvCE D%#PServer9


D&SServer"rderC6D$naic6 Provider@7egPropProvCE D&SServer"rder9

Propert$#ontet@local|%2,3)-"#A-)MA#%I&,\\S3ST,M\\Intel\\iAMT S#A& DATA|'(D&C6D$naic6 Provider@7egPropProvCE '(D&9


D&S)'(D&C6D$naic6 Provider@7egPropProvCE D&S)'(D&9


*ate+a$C6D$naic6 Provider@7egPropProvCE *ate+a$9


%,#IersionC6D$naic6 Provider@7egPropProvCE %,#Iersion9


MacC6D$naic6 Provider@7egPropProvCE MA#9


IPAddressC6D$naic6 Provider@7egPropProvCE IPAddress9


-MSersionC6D$naic6 Provider@7egPropProvCE -MSersion9


Ma.eC6D$naic6 Provider@7egPropProvCE Ma.e9


ModelC6D$naic6 Provider@7egPropProvCE Model9


ProvisionServerPingC6D$naic6 Provider@7egPropProvCE ProvisionServerPing9


Serial&u0erC6D$naic6 Provider@7egPropProvCE Serial&u0er9


Su0netMas.C6D$naic6 Provider@7egPropProvCE Su0netMas.9


S$ste&aeC6D$naic6 Provider@7egPropProvCE S$ste&ae9


1&SersionC6D$naic6 Provider@7egPropProvCE 1&Sersion9


SMSSite#odeC6D$naic6 Provider@7egPropProvCE SMSSite#ode9


SMSManageentServerC6D$naic6 Provider@7egPropProvCE SMSManageentServer9


11IDC6D$naic6 Provider@7egPropProvCE 11ID9

G9


15/19


//4444444444444444444444444444444444444444444444444444444444

44444444

// #usto iAMT Data 7eporting Denition used 0$ the Inventor$ Agent

//4444444444444444444444444444444444444444444444444444444444

44444444

?praga naespace@\\\\=\\root\\#IMB\\SMSC?praga deleteclass@Intel)iAMT)S#A&)DATA6 &"'AI-C

SMS)7eport@T71,C6

SMS)*roup)&ae@Intel iAMT Scan DataC6

SMS)#lass)ID@Intel)iAMT)S#A&)DATACE

class Intel)iAMT)S#A&)DATA : SMS)#lass)Teplate

F

SMS)7eport@TrueCE string AMTMac9

SMS)7eport@T71,CE stringAMTSetupStatus9

SMS)7eport@T71,CE stringAMTersion9

SMS)7eport@T71,CE string!I"Sersion9

SMS)7eport@T71,CEstring Date9SMS)7eport@T71,CE stringD%#PServer9

SMS)7eport@T71,CE stringD&SServer"rder9

SMS)7eport@T71,CE string'(D&9

SMS)7eport@TrueCE string D&S)'(D&9

SMS)7eport@T71,CE string*ate+a$9

SMS)7eport@T71,CE string%,#Iersion9

SMS)7eport@T71,CE stringMA#9

SMS)7eport@T71,CE stringIPAddress9

SMS)7eport@T71,CE string-MSersion9

SMS)7eport@T71,CE stringMa.e9

SMS)7eport@T71,CE stringModel9

SMS)7eport@T71,CE stringProvisionServerPing9

SMS)7eport@T71,CE stringSerial&u0er9

SMS)7eport@T71,CE stringSu0netMas.9

SMS)7eport@T71,CE stringS$ste&ae9

SMS)7eport@T71,CE string1&Sersion9

SMS)7eport@T71,CE stringSMSSite#ode9

SMS)7eport@T71,CE string11ID9

G9


16/19


• SCCM

Etending hardware inventory within the !"" environment is very similar to the

approach used in !! &DD:, ecept that there are two separate fles to work with,

confguration.mo and smsCde.mo. "onfguration.mo is used to defne the

namespaces and instances o a particular class, in our case B6ntel iAT !"A5

4ATA> , while smsCde.mo is used to defne the reporting class, and obMects. 0ne

advantage to etending inventory data with !"" is there is no need to compile

the 02 fles on each client. !"" will monitor the confguration.mo, and

smsCde.mo fles and take appropriate action on its own.

0n the primary site server computer, navigate to the ollowing location and open

the fle using notepad

\ino!es\cli"les#src\$in%\con"&'ration#(o)

Oou will notice a section at the end o the fle dedicated to inventory etension

//SSSSSSSSSSSSSSSSSSSSSSSS

// Added etensions start



// Added etensions end


6nsert the ollowing in between this section and save the fle//SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS

SSSSSS// "reate namespaces or iAT !can 4ata used by the 6nventory Agent

//SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS

SSSSSS

pragma namespace*U.root"6?&U+

pragma deleteclass*U6ntelCiATC!"A5C4ATAU, 502A68+

V4O5P-0P!W

class 6ntelCiATC!"A5C4ATA

X

VkeyW

string Ney5ameSUU

string ATac

string AT!etup!tatusstring AT?ersion

string AssetTag

string


17/19


string ateway

string 7E"6?ersion

string A"

string 6PAddress

string 8!?ersion

string ake

string odel

string Provision!erverPingstring !erial5umber

string !ubnetask

string !ystem5ame

string 5!?ersion

string !!!ite"ode

string !!anagement!erver

string 64

Y

V4O5P-0P!W

instance o 6ntelCiATC!"A5C4ATA

X

Ney5ameSU6ntel iAT !can 4ataU

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATARATacU+,4ynamic, Provider*U-egPropProvU+W ATac

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATAR

AT!etup!tatusU+,

4ynamic, Provider*U-egPropProvU+W AT!etup!tatus

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATARAT?ersionU+,

4ynamic, Provider*U-egPropProvU+W AT?ersion

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATARAssetTagU+,

4ynamic, Provider*U-egPropProvU+W AssetTag



18/19



Provision!erverPingU+,

4ynamic, Provider*U-egPropProvU+W Provision!erverPing

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATAR!erial5umberU+,

4ynamic, Provider*U-egPropProvU+W !erial5umber

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATAR!ubnetaskU+,

4ynamic, Provider*U-egPropProvU+W !ubnetask

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATAR!ystem5ameU+,4ynamic, Provider*U-egPropProvU+W !ystem5ame

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATAR5!?ersionU+,

4ynamic, Provider*U-egPropProvU+W 5!?ersion

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATAR!!!ite"odeU+,

4ynamic, Provider*U-egPropProvU+W !!!ite"ode


!!anagement!erverU+,

4ynamic, Provider*U-egPropProvU+W !!anagement!erver

VProperty"ontet*UlocalR7NEOC80"A8CA"765E!O!TE6nteliAT !"A5 4ATAR64U+,

4ynamic, Provider*U-egPropProvU+W 64

Y

5ow open the !!C4E2.02 fle and paste the 2ollowing at the end o the fle,

and save.//SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS

SSSSSS

// "ustom iAT 4ata -eporting 4efnition used by the 6nventory Agent

//SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS

SSSSSS

pragma namespace*U.root"6?&!!U+

pragma deleteclass*U6ntelCiATC!"A5C4ATAU, 502A68+

V!!C-eport*T-E+,

!!CroupC5ame*U6ntel iAT !can 4ataU+,

!!C"lassC64*U6ntelCiATC!canC4ataU+W

class 6ntelCiATC!"A5C4ATA !!C"lassCTemplate

X

V!!C-eport*True+W string ATac

V!!C-eport*T-E+W string AT!etup!tatus

V!!C-eport*T-E+W string AT?ersion

V!!C-eport*T-E+W string AssetTag

V!!C-eport*T-E+W string


19/19

V!!C-eport*T-E+W string 5!?ersion

V!!C-eport*T-E+W string !!!ite"ode

V!!C-eport*T-E+W string !!anagement!erver

V!!C-eport*T-E+W string 64

Y

Documents

IAMT Scan v0.3.1.1 Use Guide