Some manufacturers, like Purism and System76 are already selling hardware with Intel Management Engine disabled to prevent the remote exploit. Every Intel platform with either Intel Standard Manageability, Active Management Technology, or Small Business Technology, from Nehalem in 2008 to Kaby Lake in 2017 has a remotely exploitable security hole in the ME. Intel confirmed a Remote Elevation of Privilege bug ( CVE- 2017-5689, SA-00075) in its Management Technology on May 1, 2017. AMT provides similar functionality to IPMI, although AMT is designed for client computing systems as compared with the typically server-based IPMI.Ĭurrently, AMT is available in desktops, servers, ultrabooks, tablets, and laptops with Intel Core vPro processor family, including Intel Core i5, Core i7, Core i9 and Intel Xeon E3-1000, Xeon E, Xeon W-1000 product family. AMT has moved towards increasing support for DMTF Desktop and mobile Architecture for System Hardware (DASH) standards and AMT Release 5.1 and later releases are an implementation of DASH version 1.0/1.1 standards for out-of-band management.
AMT is built into PCs with Intel vPro technology and is based on the Intel Management Engine (ME).
ĪMT is designed into a service processor located on the motherboard, and uses TLS-secured communication and strong encryption to provide additional security.
#G DATA ANTIVIRUS MANAGED PC#
It gives a management application (and thus, the system administrator who uses it) access to the PC down the wire, in order to remotely do tasks that are difficult or sometimes impossible when working on a PC that does not have remote functionalities built into it.
#G DATA ANTIVIRUS MANAGED SOFTWARE#
AMT is not intended to be used by itself it is intended to be used with a software management application. Hardware-based management has been available on Intel/AMD based computers in the past, but it has largely been limited to auto-configuration using DHCP or BOOTP for dynamic IP address allocation and diskless workstations, as well as wake-on-LAN (WOL) for remotely powering on systems. Hardware-based management does not depend on the presence of an OS or locally installed management agent. Hardware-based management works at a different level from software applications, and uses a communication channel (through the TCP/IP stack) that is different from software-based communication (which is through the software stack in the operating system). Out-of-band (OOB) or hardware-based management is different from software-based (or in-band) management and software management agents. Intel Active Management Technology ( AMT) is hardware and firmware for remote out-of-band management of select business computers, running on the Intel Management Engine, a microprocessor subsystem not exposed to the user, intended for monitoring, maintenance, updating, and repairing systems.
A part of the Intel AMT web management interface, accessible even when the computer is sleeping
0 kommentar(er)
