fix order of OEMparameters to enable BIOS SOL on newer AMT generations
[amt] /
1.TH amt-howto 7 "(c) 2007 Gerd Hoffmann"
3Intel AMT with linux mini howto
6.SS What is AMT and why I should care?
7AMT stands for "Active Management Technology". It provides some
8remote management facilities. They are handled by the hardware and
9firmware, thus they work independant from the operation system.
10Means: It works before Linux bootet up to the point where it activated
11the network interface. It works even when your most recent test
12kernel deadlocked the machine. Which makes it quite useful for
13development machines ...
15Intel AMT is part of the vPro Platform. Recent intel-chipset based
16business machines should have it. My fairly new Intel SDV machine has
17it too.
19.SS Documentation
20Look here for documentation beyond this mini howto:
24Most useful to get started: "Intel AMT Deployment and Reference Guide"
26.SS Very short AMT enabling instructions.
28Enter BIOS Setup.
29* Enable AMT
31Enter ME (Management Extention) Setup. Ctrl-P hotkey works for me.
32* Login, factory default password is "admin".
34* Change password. Trivial ones don't work, must include upper-
35and lowercase letters, digits, special characters.
37* Enable AMT Managment.
39Reboot, Enter ME Setup again with AMT enabled.
40* Configure AMT (hostname, network config, ...)
42* Use SMB (Small Business) management mode. The other one
43(Enterprise) requires Active Directory Service Infrastructure,
44you don't want that, at least not for your first steps ...
46.SS Testing AMT
47Take your browser, point it to http://machine:16992/. If you
48configured AMT to use DHCP (which is the default) the OS and the
49management stack share the same IP address.
51You must do that from a remote host as the NIC intercepts network
52packets for AMT, thus it doesn't work from the local machine as the
53packets never pass the NIC then. If everything is fine you'll see a
54greeting page with a button for login.
56You can login now, using "admin" as username and the password
57configured during setup. You'll see some pages with informations
58about the machine. You can also change AMT settings here.
60.SS Control Machine
61You might have noticed already while browing the pages: There is a
62"Remote Control" page. You can remotely reset and powercycle the
63machine there, thus recover the machine after booting a b0rken kernel,
64without having someone walk over to the machine and hit the reset
67.SS Serial-over-LAN (SOL) console
68AMT also provides a virtual serial port which can be accessed via
69network. That gives you a serial console without a serial cable to
70another machine.
72If you have activated AMT and SOL the linux kernel should see an
73additional serial port, like this on my machine:
76 [root@xeni ~]# dmesg | grep ttyS2
77 0000:00:03.3: ttyS2 at I/O 0xe000 (irq = 169) is a 16550A
80Edit initab, add a line like this:
83 S2:2345:respawn:/sbin/agetty ttyS2 115200 vt100-nav
86You should add the serial port to /etc/securetty too so you are able
87to login as root. Reload inittab ("init q"). Use amtterm to connect.
88Tap enter. You should see a login prompt now and be able to login.
90You can also use that device as console for the linux kernel, using
91the usual "console=ttyS2,115200" kernel command line argument, so you
92see the boot messages (and kernel Oopses, if any).
94You can tell grub to use that serial device, so you can pick a working
95kernel for the next boot. Usual commands from the grub manual, except
96that you need "--port=0xe000" instead of "--unit=0" due to the
97non-standard I/O port for the serial line (my machine, yours might use
98another port, check linux kernel boot messages).
100The magic command for the Xen kernel is "com1=115200,8n1,0xe000,0"
101(again, you might have to replace the I/O port). The final '0'
102disables the IRQ, otherwise the Xen kernel hangs at boot after
103enabling interrupts.
105.SS Fun with Xen and AMT
106The AMT network stack seems to become slightly confused when running
107on a Xen host in DHCP mode. Everything works fine as long as only
108Dom0 runs. But if one starts a guest OS (with bridged networking) AMT
109suddenly changes the IP address to the one the guest aquired via DHCP.
111It is probably a good idea to assign a separate static IP address to
112AMT then. I didn't manage to switch my machine from DHCP to static IP
113yet though, the BIOS refuses to accept the settings. The error
114message doesn't indicate why.
116.SS More fun with AMT
117You might want to download the DTK (Developer Toolkit, source code is
118available too) and play with it. The .exe is a self-extracting rar
119archive and can be unpacked on linux using the unrar utility. The
120Switchbox comes with a linux binary (additionally to the Windows
121stuff). The GUI tools are written in C#. Trying to make them fly
122with mono didn't work for me though (mono version 1.2.3 as shipped
123with Fedora 7).
126amtterm(1), gamt(1), amttool(1)
130Gerd Hoffmann <>
Impressum, Datenschutz