4 ms·

This is literally an above-the-fold advertised feature of vPro: > Remote Manageability > Remotely power up, update, and repair PCs outside of the firewall, ev

This is literally an above-the-fold advertised feature of vPro: > Remote Manageability > Remotely power up, update, and repair PCs outside of the firewall, even if they’re out-of-band1, to help your users from virtually anywhere. https://www.intel.com/content/www/us/en/now/itheroes.html https://www.intel.com/content/www/us/en/now/itheroes.html > With features like hardware-level remote keyboard, video, and mouse control (KVM)1 3 Intel AMT allows you to discover, repair, and help protect networked computing assets as easily as if working in person. https://www.intel.com/content/www/us/en/architecture-and-technology/vpro/active-management-technology/overview.html https://www.intel.com/content/www/us/en/architecture-and-tec... Morale of the story here seems to be to actually bother to spend 5 seconds figuring out what you bought?

cqqxo4zV46cp 2y ago
No. Nerds love to hate any notion of their hardware spying on them, especially if it’s Intel. Computers need to work exactly as they did in 2004. But let’s also ignore the management functionality we had in ‘04 :)
Timshel 2y ago
Features are advertised, but I don't see any mention of the server itself. Instead of aimlessly searching the doc if you know it exists you can just search for it and find some documentation which appear way more interesting: https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments%2Faccessingintelamtviathewebuiinterface.htm https://software.intel.com/sites/manageability/AMT_Implement... And the author is quite happy with the feature, appeared he just wanted to advertise it: > yeah... I will say though. I used this laptop as a server for a bit and it was so so useful.
- kllrnohj 2y ago
  > but I don't see any mention of the server itself. I mean how else does any remote management solution work? This is no different than IPMI?
  - yjftsjthsd-h 2y ago
    You could have the machine act as a client and reach out to a management server. If you wanted to get really fancy you could maybe even add a DHCP option to advertise the local management server for autoconfiguration. I'm not convinced that would actually be much more secure, but it is a thing you could do.
    - kllrnohj 2y ago
      I'm not sure how you'd actually pull that off. Are you configuring AMT with such settings? Don't you then end up with 2 IPs per MAC? Or is AMT given its own MAC? Seems messy regardless. Just having it be a passive server is much simpler as it never needs to care how the packets got routed to it, it just responds in kind
      - yjftsjthsd-h 2y ago
        To be quite clear, I don't believe anyone has implemented it like this, I was just spitballing theoretical possibilities. And yes, you're right, you'd probably need to make the ethernet port present 2 MACs so the management system can have its own independent network stack, unless I've forgotten some awful trick to get around that (which is possible; I can't quite remember how single-port servers host their LoM interfaces).
sebazzz 2y ago
I've yet to find a company also using the vPro feature set.

cqqxo4zV46cp 2y ago

No. Nerds love to hate any notion of their hardware spying on them, especially if it’s Intel. Computers need to work exactly as they did in 2004. But let’s also ignore the management functionality we had in ‘04 :)

Timshel 2y ago

Features are advertised, but I don't see any mention of the server itself. Instead of aimlessly searching the doc if you know it exists you can just search for it and find some documentation which appear way more interesting: https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments%2Faccessingintelamtviathewebuiinterface.htm https://software.intel.com/sites/manageability/AMT_Implement... And the author is quite happy with the feature, appeared he just wanted to advertise it: > yeah... I will say though. I used this laptop as a server for a bit and it was so so useful.

kllrnohj 2y ago
> but I don't see any mention of the server itself. I mean how else does any remote management solution work? This is no different than IPMI?
- yjftsjthsd-h 2y ago
  You could have the machine act as a client and reach out to a management server. If you wanted to get really fancy you could maybe even add a DHCP option to advertise the local management server for autoconfiguration. I'm not convinced that would actually be much more secure, but it is a thing you could do.
  - kllrnohj 2y ago
    I'm not sure how you'd actually pull that off. Are you configuring AMT with such settings? Don't you then end up with 2 IPs per MAC? Or is AMT given its own MAC? Seems messy regardless. Just having it be a passive server is much simpler as it never needs to care how the packets got routed to it, it just responds in kind
    - yjftsjthsd-h 2y ago
      To be quite clear, I don't believe anyone has implemented it like this, I was just spitballing theoretical possibilities. And yes, you're right, you'd probably need to make the ethernet port present 2 MACs so the management system can have its own independent network stack, unless I've forgotten some awful trick to get around that (which is possible; I can't quite remember how single-port servers host their LoM interfaces).

sebazzz 2y ago

I've yet to find a company also using the vPro feature set.