Intel System Defense Utility 1.8.1

• 
• Download Intel System Defense Utility 1.8.1

Intel System Defense Utility 1.8.1 description

Intel System Defense Utility is an easy to use tool that remotely configures the security of your Intel vPro-capable PCs for both the system integrator and SMB environments.1) ISDU is localized for the following languages: French German Spanish Italian Japanese Chinese Brazilian Portuguese Russian 2)  Serial Number of Hard disk has been added in Asset management tab and as well as in Print Asset functionality. 3)  Added “Remove computer” shortcut menu in Left Tree view. 4)  Auto save and auto load of the recently used computers would be saved and retrieve back. 5)  In remote re-boot, incase ISDU console PC has multiple CD-ROM or Floppy drive, user interface has been provided so that user can choose from which drive he wants to re-boot. 6)  Enable / Disable “Apply Policy For Selected Items” is made automatically based on the computer connectivity state and check box checked state in tree view. 7)  “Intel AMT Commander” strings have been replaced with “Intel System Defense Utility” in case of ISDU crash. 8)  ISDU form window has been restricted to (1000, 700), beyond Intel System Defense Utility 1.8.1 user would not be allowed to shrink the window. 9)  A fix has been in scanning operation, now ISDU is made to scan where AMT comptuer reside in 255.255.255.0 subnet. ( for example if an AMT system reside in 192.168.0.*, then ISDU scans computer from 192.168.0.1 to 192.168.0.254) Known Issues: ------------- 1. Connection may fail without giving error. Please make sure that you provide the correct password in the “Connection & Settings” window. 2. The BIOS terminal screen remains open on the console after Intel® AMT computer boots to the OS. Proposed resolution: Close the window using close option of the BIOS terminal screen. 3. Remote Image Rebooting: Make sure that AMT system which is getting re-boot does not have USB Floppy drive present, if Intel System Defense Utility 1.8.1 is present then disable USB thru BIOS Setting - > Advanced -> USB Configuration -> Disable USB Ports and then start re-booting remotely else user can remove the USB Floppy Drive before giving remote image re-boot. 4. Installation setup would fail, in case user tries to install new ISDU version on top of older version. Before installing new version Intel System Defense Utility 1.8.1 is advised that user uninstall the old version. Features of ISDU ---------------- System Defense FEATURES ------------------------------ Network Discovery Feature: -------------------------- Scan the Intel AMT system found in the local network, say if AMT system systems are in the network (192.168.1.x) then System defense utility would start scan AMT systems from 192.168.1.1 to 192.168.1.254 and the discovered computers would be displayed in the Network Discovery tab. In Intel System Defense Utility 1.8.1 tab user can able to connect or disconnect the AMT system found during scan operation. Connection & setting Feature: ----------------------------- User can able to connect or disconnect the AMT system. If the system is in connected state then this tab would show following info: Version of Intel AMT system, BIOS Version, User Accounts and Web Interface link. Network Settings Feature: ------------------------ This feature has following options, the applies to AMT system 1) Obtain IP Settings Automatically (DHCP IP) 2) Use the Following IP Settings (Static IP) Note: i) When the Intel AMT Computer is configured to DHCP enabled mode, the host OS must be configured to use DHCP, as well ii) When changing DHCP mode from “disabled” to “enabled” with the OS present, the Intel AMT device will establish connectivity only in the next host DHCP negotiation. Intel System Defense Utility 1.8.1 is advised to renew the host’s DHCP address in this case. System Defense feature: ----------------------- The following options are available to the user: 1) No Ping - Block the response to  PING ICMP packets. If No ping option is selected, then user cant ping this AMT system from any other system. 2) Anti-Spoofing - Block the spoofing packets. If Anti-Spoofing option is selected, the antispoofing filter would be applied in the policy. 3) The user can chose either one of the follwing options i) No internet Access and only Local Access ii) Block Limited Services iii) Allow Limited Services iv) No restriction on internet No Inernet Access and only local access: The objective of this policy is to provide local service for the AMT system in the network and should not allow Web access. For example: Let say if an AMT system(192.168.1.25) is in the local network (192.168.1) and if the subnet mask of the system is (255.255.255.0) then Intel System Defense Utility 1.8.1 should able to acess local intranet,local FTP and all local services in the network. Constraint: This option works in AMT version 2.1.0 but not in Version 3.0.0. After appling this policy on AMT version 3.0.0 if user re-boots the system then the system would get isolated from the network. Block Limited Services: This feature is based on blocking the ports, there is a limit in AMT firmware that user shall able to block limited services, if user exceeds the services then an error message box would be reported to the user. This feature has Allow Limited Services: This feature is based on allowing the ports, there is a limit in AMT firmware that user shall able to allow limited services, if user tries to exceed the service then an error message box would be reported to the user. No restriction on internet. Using this option user shall able access both internet as well as local access. Remote Control feature: ----------------------- The following options are provided to the user: 1) Boot the remote PC with Floppy image, CD image or an image file. Please note that the size of the image file cannot exceed 120 MB and DVD ROM image is not supported. 2) The remote PC can be controlled by sending the following set of remote control commands. It is recommended that the user presses the REFRESH button after giving any remote control command to see the current state of the system, because not all commands are applicable for all system state only. a. Turn power OFF - To turn off the remote PC. If the remote PC is already turned OFF, giving this command is invalid. b. Turn power ON - To turn on the remote PC. If the remote PC is already turned ON, giving this command has no effect. c. Cycle power - Switch OFF and swich ON - To turn OFF and turn ON the PC, i.e., restart the remote PC. d. Warm Reset - To reset the system irrespective of system current state. The user can select the either BOOT PC from an image or Control command. Then the command can be executed in the remote PC by pressing the Remote Control button. The command can be executed in all selected computers in the left tree view by selecting the Control All Selected Computers button. But not all commands can be applied for multiple systems. Asset Management Feature: ------------------------- The user can view the folowing information in this tab: 1) Manufacturer, Product ID and Version of the Motherboard. 2) Model name, Serial Number and Size of the Disk Drives. 3) Type, Manufucaturer, Version and Speed of the processors available in the Motherboard and 4) Slot Number, Type, Size and Speed of the RAM connected. The user can perform the following opertion on the NVRAM. Any file format would be supported, internally data is stored in binary format in NVRAM. 1) Write the data into NVRAM with file format whose size may be maximum of 192Kb. However, if already some data is already available in NVRAM, the maximum size of the data that can be written into NVRAM is limited to the remaining space in NVRAM. Filename also would be stored stored in NVRAM, so that it would be helpfull if user reads the data back the file. 2) Read data from NVRAM. Data will be read from NVRAM only if data has been already written into NVRAM. 3) Erase all data from NVRAM. Constraint: Only one file can be stored in NVRAM. It would be better before writing any file  erase the NVRAM by Erase command. Event Log Feature: ------------------ This feature is to read the event log information from the client PCs. Print Assets and Policies Feature: ---------------------------------- The PRINT menu is provided under File menu. This has three sub-menus with the following functionalities. 1. Print Assets - Prints the Assets information for all the AMT systems selected in the left tree. 2. Print Policies - Prints the policy information for all the AMT systems selected in the let tree. 3. Pint Assets & Policies - Prints both Assets and Policies information for all the AMT systems selected in the left tree.

Intel System Defense Utility 1.8.1 Tag: