Intel BX80623I52500 User manual

Intel® Desktop Boards
DQ67SW, DQ67EP, DQ67OW
Intel® vPro™ Technology Setup and
Configuration Guide
September 2011
Part Number: G45734-001

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
2
Revision History
Revision
Revision History
Date
-001
First release of the Intel®vPro™ Technology Setup and Configuration Guide for Intel®
Desktop Boards DQ67SW, DQ67EP, DQ67OW
September 2011
INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL®PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY
ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT. EXCEPT AS PROVIDED
IN INTEL’S TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS, INTEL ASSUMES NO LIABILITY WHATSOEVER, AND INTEL
DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, RELATING TO SALE AND/OR USE OF INTEL PRODUCTS INCLUDING LIABILITY
OR WARRANTIES RELATING TO FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR INFRINGEMENT OF ANY PATENT,
COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT. UNLESS OTHERWISE AGREED IN WRITING BY INTEL, THE INTEL
PRODUCTS ARE NOT DESIGNED NOR INTENDED FOR ANY APPLICATION IN WHICH THE FAILURE OF THE INTEL PRODUCT COULD
CREATE A SITUATION WHERE PERSONAL INJURY OR DEATH MAY OCCUR.
All Intel®desktop boards are evaluated as Information Technology Equipment (I.T.E.) for use in personal computers (PC) for
installation in homes, offices, schools, computer rooms, and similar locations. The suitability of this product for other PC or
embedded non-PC applications or other environments, such as medical, industrial, alarm systems, test equipment, etc. may not be
supported without further evaluation by Intel.
Intel Corporation may have patents or pending patent applications, trademarks, copyrights, or other intellectual property rights
that relate to the presented subject matter. The furnishing of documents and other materials and information does not provide
any license, express or implied, by estoppel or otherwise, to any such patents, trademarks, copyrights, or other intellectual
property rights.
Intel may make changes to specifications and product descriptions at any time, without notice.
Designers must not rely on the absence or characteristics of any features or instructions marked “reserved” or “undefined.” Intel
reserves these for future definition and shall have no responsibility whatsoever for conflicts or incompatibilities arising from
future changes to them.
Intel desktop boards may contain design defects or errors known as errata, which may cause the product to deviate from
published specifications. Current characterized errata are available on request.
Contact your local Intel sales office or your distributor to obtain the latest specifications before placing your product order.
Copies of documents which have an ordering number and are referenced in this document, or other Intel literature, may be
obtained from:
Intel Corporation
P.O. Box 5937
Denver, CO 80217-9808
or call in North America 1-800-548-4725, Europe 44-0-1793-431-155, France 44-0-1793-421-777,
Germany 44-0-1793-421-333, other Countries 708-296-9333.
Intel, Intel Core, Intel vPro, and Xeon are trademarks of Intel Corporation in the U.S. and other countries.
* Other names and brands may be claimed as the property of others.
Copyright 2011 Intel Corporation. All rights reserved.

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
3
Contents
Revision History.....................................................................................................................................................................2
Contents.....................................................................................................................................................................................3
Figures.........................................................................................................................................................................................3
Tables ..........................................................................................................................................................................................4
Preface........................................................................................................................................................................................5
Feature Summary.................................................................................................................................................................6
1. Intel® vPro™ Technology Setup and Configuration ..................................................................................7
1.1 BIOS Setup.............................................................................................................................................................7
1.1.1 Overview.......................................................................................................................................................7
1.1.2 Entering BIOS Setup...............................................................................................................................7
1.1.3 BIOS Setup –Configuration Menu...................................................................................................8
1.1.4 BIOS Setup –Security Menu ...........................................................................................................10
1.1.5 BIOS Setup –Intel® ME Menu .......................................................................................................... 11
1.2 Intel® AMT –Quick Configuration: Local .............................................................................................22
1.3 Intel AMT –Remote Configuration, TLS-PSK ..................................................................................24
1.4 Intel AMT –Remote Configuration, TLS-PKI....................................................................................25
1.5 Intel AMT Configuration –Host Based Configuration................................................................25
1.6 Fast Call for Help (FCFH).............................................................................................................................25
1.7 KVM Remote Control ....................................................................................................................................27
1.8 Intel® Identity Protection Technology (Intel® IPT)........................................................................29
1.9 BIOS Maintenance Mode.............................................................................................................................30
2. References..................................................................................................................................................................33
Figures
Figure 1. Intel® Desktop Boards POST Screen.....................................................................................................7
Figure 2. BIOS Setup - Main Menu..............................................................................................................................8
Figure 3. BIOS Setup - Configuration Menu ..........................................................................................................9
Figure 4. BIOS Setup - Configuration........................................................................................................................9
Figure 5. BIOS Setup - Security Menu...................................................................................................................10
Figure 6. BIOS Setup –Intel® ME Menu.................................................................................................................11
Figure 7. Intel ME - Main Menu..................................................................................................................................12
Figure 8. Intel ME –Intel ME Configuration........................................................................................................13
Figure 9. Intel ME - Intel AMT Configuration.....................................................................................................14
Figure 10. Remote Setup and Configuration - Main Screen.....................................................................15
Figure 11. Intel AMT TLS with PKI Provisioning Options...........................................................................16
Figure 12. Intel AMT Permanent Certificate Manager ................................................................................16
Figure 13. Intel AMT TLS with PSK Provisioning Identifier (PID) ..........................................................17

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
4
Figure 14. Intel AMT TLS with PSK Provisioning Passphrase (PPS)....................................................17
Figure 15. Intel AMT - Local Configuration ........................................................................................................18
Figure 16. Intel AMT - Local Configuration, IPV4 Configuration Options..........................................19
Figure 17. Intel AMT - Local Configuration, IPV6 Configuration Options..........................................19
Figure 18. Intel AMT - SOL/IDE-R Configuration.............................................................................................20
Figure 19. Intel AMT KVM Remote Control Configuration ........................................................................21
Figure 20. Intel AMT - Configuring Computer Name ....................................................................................22
Figure 21. MEINFO Output - Intel AMT Defaults.............................................................................................23
Figure 22. MEINFO Output - Local Configuration ...........................................................................................23
Figure 23. Intel AMT - TLS with PSK One Touch Configuration.............................................................24
Figure 24. FCFH Header Locations.........................................................................................................................25
Figure 25. Fast Call for Help Alert Screen..........................................................................................................26
Figure 26. VNC Viewer+ Console Remote Login ............................................................................................27
Figure 27. Intel AMT Client Screen Showing KVM Remote Control Access Code........................27
Figure 28. VNC Viewer+ Management Console Access Code Screen.................................................28
Figure 29. VNC Viewer+ Management Console View..................................................................................28
Figure 30. Symantec VIP Access Security Credential..................................................................................29
Figure 31. VASCO DIGIPASS for Web Security Credential.........................................................................29
Figure 32. BIOS Maintenance Intel AMT Reset to Defaults......................................................................30
Figure 33. Intel AMT Reset in Progress...............................................................................................................31
Figure 34. Intel AMT Reset Complete...................................................................................................................31
Figure 35. BIOS_CFG and MEBX_RST Header Locations............................................................................32
Tables
Table 1. Feature Summary.............................................................................................................................................6
Table 2. Location of Intel vPro Technology Features in BIOS Setup .....................................................7

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
5
Preface
This Setup and Configuration Guide specifies the steps necessary for enabling the different features of Intel®
vPro™technology for the Intel® Desktop Boards DQ67SW, DQ67EP and DQ67OW. It does not cover the various
third-party software applications that take advantage of these features.
Intended Audience
This Guide is intended to provide detailed, technical information about the Intel Desktop Boards DQ67SW,
DQ67EP and DQ67OW and its components to the vendors, system integrators, and other engineers and
technicians who need this level of information. It is specifically not intended for general audiences.
What This Document Contains
Chapter Description
Ch 1 A description of the supported hardware and Intel vPro technology features of the Intel Desktop
Boards DQ67SW, DQ67EP and DQ67OW, plus BIOS Setup details for Intel vPro technology and Intel®
Active Management Technology (Intel® AMT)
Ch 2 References
Typographical Conventions
This section contains information about the conventions used in this specification. Not all of these symbols
and abbreviations appear in all specifications of this type.
Common Notation
BIOS
Basic Input/Output System
DDR
Double Data Rate
DIMM
Dual In-line Memory Module
ECC
Error-Correcting Code
GB
Gigabyte (1,073,741,824 bytes)
GB/s
Gigabytes per second
Gb/s
Gigabits per second
KB
Kilobyte (1024 bytes)
Kbit
Kilobit (1024 bits)
kbits/s
1000 bits per second
KVM
Keyboard Video Mouse
LGA
Land Grid Array
MB
Megabyte (1,048,576 bytes)
MB/s
Megabytes per second
Mbit
Megabit (1,048,576 bits)
Mbits/s
Megabits per second
POST
Power On Self Test
UEFI
Unified Extensible Firmware Interface
VNC
Virtual Network Computing
xxh
An address or data value ending with a lowercase h indicates a hexadecimal value.

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
6
Feature Summary
Intel Desktop Boards DQ67SW, DQ67EP and DQ67OW support the Intel® Core™i3, Intel® Core™i5, Intel® Core™
i7, and Intel® Xeon® E3 processor families in the LGA1155 package. They use the Intel® Q67 Express Chipset to
provide the latest in remote management via Intel® vPro™technology. Table 1 summarizes the major Intel®
vPro™technology features of the board.
Intel® vPro™
Technology
Intel® Active Management Technology (Intel® AMT) 7.0
Intel® Trusted Execution Technology (Intel® TXT)
Fast Call For Help (FCFH)
KVM Remote Control
Intel® Virtualization Technology (Intel® VT)
Intel® Virtualization for Directed I/O (Intel® VT-d)
Trusted Platform Module (TPM)
Intel® Identity Protection Technology (Intel® IPT)
Table 1. Feature Summary
Note: Intel® Active Management Technology requires one of the following Intel® Core™ i5 vPro™ and Intel®
Core™ i7 vPro™ processors: Intel® Core™ i5-2390T, Intel® Core™ i5-2400, Intel® Core™ i5-2400S, Intel® Core™
i5-2500, Intel® Core™ i5-2500S, Intel® Core™ i5-2500T, Intel® Core™ i7-2600, or Intel ® Core™ i7-2600S
processor. In addition, the following Intel® Xeon® E3 processors support Intel AMT functionality: Intel®
Xeon® E3-1220, Intel® Xeon® E3-1220L, Intel® Xeon® E3-1225, Intel® Xeon® E3-1230, and Intel® Xeon® E3-
1235 processors. Other Intel® Core™ processors will provide Intel® Standard Manageability only.
Note: Of the Intel processors listed above, only the Intel Core i5 and Intel Core i7 vPro processors and
Intel Xeon E3 processors with integrated Intel® HD graphics will support KVM Remote Control; discrete
graphics are not supported. All Intel Core i5 and Intel Core i7 vPro processors listed above and Intel Xeon
E3-1225, Intel Xeon E3-1235 processors have integrated Intel HD graphics.

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
7
1. Intel®vPro™Technology Setup and Configuration
1.1 BIOS Setup
1.1.1 Overview
The Intel Desktop Boards DQ67SW, DQ67EP and DQ67OW BIOS interface is based upon the UEFI specification.
As a result, the Intel® vPro™technology features are accessed from the BIOS Setup screens. The menus of
interest to the Intel vPro technology user are Configuration, Security and Intel® Management Engine (Intel® ME).
Table 2 lists the BIOS setup locations for setting the different features of Intel vPro technology.
Intel® vPro™Technology Feature
BIOS Setup Menu
Trusted Platform Module (TPM)
Configuration / On-Board Devices
Intel Virtualization Technology (Intel VT)
Security
Intel Trusted Execution Technology (Intel TXT)
Security
Intel VT for Directed I/O (Intel VT-d)
Security
Intel Active Management Technology (Intel AMT)
Intel ME
Table 2. Location of Intel vPro Technology Features in BIOS Setup
1.1.2 Entering BIOS Setup
To enter BIOS Setup, the user must press [F2] during the POST screen displayed shortly after power is applied
to the board, as shown in Figure 1.
Figure 1. Intel® Desktop Boards POST Screen
Upon entering BIOS Setup, the user will be presented the BIOS Setup Main menu screen as shown in Figure 2.

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
8
Figure 2. BIOS Setup - Main Menu
1.1.3 BIOS Setup –Configuration Menu
The Configuration Menu, shown in Figure 3, contains settings for On-Board Devices, as well as access to the
system Event Log.

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
9
Figure 3. BIOS Setup - Configuration Menu
TPM is enabled or disabled by means of the Configuration / On-Board Devices menu as shown in Figure 4.
Figure 4. BIOS Setup - Configuration

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
10
1.1.4 BIOS Setup –Security Menu
Figure 5 displays the Security menu. This menu gives you access to virtualization-related features such as
Intel VT, Intel TXT and Intel VT-d. It also allows you to set passwords for platform- and hard drive-level
security and to control the Execute Disable Bit (XD) technology and Chassis Intrusion features.
Figure 5. BIOS Setup - Security Menu
Note: Intel VT and Intel VT-d must be enabled before Intel TXT. Once Intel TXT is enabled, the user
cannot disable Intel VT or Intel VT-d unless Intel TXT is disabled first.
Note: Setting the Master Key Hard Disk Drive Password will not enable Hard Disk Drive password
security. Only by setting the Hard Disk Drive Password will the system pause during boot to ask for a
password. At that time either the Hard Disk Drive Password or the Master Key Password (if set) will allow
the system to proceed.
Note: The Supervisor Password controls access to the BIOS Setup menus. The User Password controls
booting the platform and is separate from the Hard Disk Drive Password. The User Password is stored in
the Intel Desktop Boards DQ67SW, DQ67EP and DQ67OW non-volatile RAM and stays with the platform,
whereas the Hard Disk Drive Password is stored directly on the HDD and is portable with it.
Note: The Hard Disk Drive Password is only functional for hard drives connected to SATA port 0.

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
11
1.1.5 BIOS Setup –Intel®ME Menu
When first accessing the Intel ME menu, the user will be asked to change the default password of “admin”.
The new password must be at least eight characters long and be composed of upper- and lower-case letters,
numbers and symbols (excluding colon, comma and double quotes). Figure 6 illustrates the initial Intel ME
menu.
Figure 6. BIOS Setup –Intel® ME Menu

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
12
Once the administrator password is set, the user is presented the Intel ME main menu, shown in Figure 7.
Figure 7. Intel ME - Main Menu

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
13
1.1.5.1 Intel ME –Intel ME Configuration
Under the Intel ME Configuration menu, the user will be able to disable Intel AMT (enabled by default); select
the Intel ME Power Policy; and set the Idle Timeout, the amount of time, in seconds, Intel ME must be idle
before it will enter its lowest-power state (valid values are from 1 –65535). These options are shown in
Figure 8.
Figure 8. Intel ME –Intel ME Configuration
Note: If Intel AMT is enabled, on-board LAN (found under BIOS Setup - Configuration / On-Board Devices)
cannot be disabled. See Figure 4.
Choosing Power Policy 1 (On in S0) effectively disables Intel AMT Out-of-Band (OOB) operation. Power
Policy 2 (On in S0, ME Wake in S3, S4-S5) allows Intel ME and Intel AMT to operate when the system is turned
off or in a standby state. After the Idle Timeout timer has expired, Intel ME will enter its lowest power state,
but can be awakened by network traffic directed at the Intel ME without waking the entire system.
Note: Actual time required before Intel ME will enter into its lowest power state is approximately Idle
Timeout plus 1½ minutes.

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
14
1.1.5.2 Intel®ME –Intel® AMT Configuration
Figure 9 displays the main Intel AMT Configuration screen. From here, the user can select the Setup and
Configuration (Provisioning) Mode as well as reset Intel AMT back to factory defaults (except the Intel ME
administrator password).
Figure 9. Intel ME - Intel AMT Configuration

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
15
1.1.5.2.1 Intel AMT Configuration –Remote Configuration
Once the user selects the provisioning mode to use, the detailed settings of these modes can be viewed and
configured. Figure 10 shows the details of Remote Setup and Configuration Mode (previously known as
Enterprise, or Standard/Advanced, Provisioning).
Figure 10. Remote Setup and Configuration - Main Screen
From this screen the user can select whether to use TLS (Transport Layer Security) with PKI (Public Key
Infrastructure), also known as Zero Touch or Remote Configuration; or TLS with PSK (Pre-shared Key), which
can be used with a USB flash drive for One Touch Configuration.
Other options available from the Remote Setup and Configuration screen allow the user to assign an IP
address to the Provisioning Server (either IPV4 or IPV6), change from the default Server Port of 9971, or
provide a Fully Qualified Domain Name (FQDN) for the Provisioning Server to enhance enterprise security.
For this generation of Intel AMT, the Remote Configuration Service is disabled by default. As a result, Bare
Metal Provisioning is no longer supported. To begin TLS with PKI remote configuration, select Start
Configuration under the Communication with Provisioning Server heading. The platform will then begin to
send out the “Hello Packets” necessary for Remote Configuration.

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
16
1.1.5.2.1.1 Remote Configuration –TLS with PKI
Figure 11 shows the options for TLS with PKI configuration. Figure 12 follows with a view of the Permanent
Certificate Manager; the User Certificate Manager operates in a similar manner.
Figure 11. Intel AMT TLS with PKI Provisioning Options
Figure 12. Intel AMT Permanent Certificate Manager

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
17
1.1.5.2.1.2 Remote Configuration –TLS with PSK
For TLS with PSK, the options are shown in Figure 13.The Provisioning Identifier (PID) is an eight-character
string formatted as two quartets separated by a dash.
Figure 13. Intel AMT TLS with PSK Provisioning Identifier (PID)
Figure 14. Intel AMT TLS with PSK Provisioning Passphrase (PPS)

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
18
1.1.5.2.2 Intel AMT Configuration –Local Configuration
As can be seen from Figure 15 through Figure 17, the user can manually set Computer and Domain Name in
the Local Setup and Configuration screen (previously known as SMB/Small-Medium Business Mode). The user
can also choose to: share the Management Engine’s FQDN with the operating system (IPV6 does not allow
FQDN sharing if DDNS is enabled); allow dynamic updates to the DNS (Domain Name System); and configure
the IPV4 or IPV6 TCP/IP protocols. Default is set to IPV4, with DHCP enabled.
Figure 15. Intel AMT - Local Configuration

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
19
Figure 16. Intel AMT - Local Configuration, IPV4 Configuration Options
Figure 17. Intel AMT - Local Configuration, IPV6 Configuration Options

Intel® Desktop Board DQ67SW, DQ67EP, DQ67OW
Intel® vPro™Technology Setup and Configuration Guide
20
1.1.5.2.3 Intel AMT Configuration –Other Options
The following screens highlight several of the common features of Intel AMT provisioning. These include:
SOL/IDE-R (Serial-over-LAN/IDE-Redirection) configuration in Figure 18; KVM Remote Control (Keyboard Video
Mouse) Configuration in Figure 19; and PRTC (Protected Real Time Clock).
Figure 18. Intel AMT - SOL/IDE-R Configuration
The Redirection Mode setting under SOL/IDE-R, as highlighted in Figure 18, is to allow the use of remote
consoles designed for legacy platforms (Intel AMT 5.0 and earlier). These require specific port initialization
commands whenever performing redirection operations. Enabling this mode allows the use of Intel AMT 5.0
(and earlier) management consoles with this platform.