Intel® AT-d Validation Overview v0_3.pdf
0 likes13 views
This document provides an overview and instructions for validating the Intel AT-d platform on Intel vPro systems. It describes the hardware and firmware prerequisites, how to enable AT-d in the BIOS and Management Engine, and how to perform validation tests. The validation process includes checking AT-d hardware and software straps, enabling AT-d, and verifying BIOS compliance. It also outlines the steps for assigning an administrator, managing users, and configuring devices for encryption with AT-d.
Intel® AT-d Validation Overview v0_3.pdf
- 1. Intel Confidential 1 1 Intel® AT- d Validation Overview • Paul Yang • PCME TME
- 2. Intel® AT-d Platform Prerequisites • Only for Intel® vPro McCreary platform so far – vPro CPU – GMCH Q45 with A3 stepping – ICH10 DO with B0 stepping • Intel AT-d functional strap shall be enabled on the H/W board by pulling HDA_SDOUT signal high • Intel® AT-d enabled FW and Intel® AT-d capable BIOS shall be programmed on the platform • The Platform shall be configured with Intel® AT-d BIOS settings – SATA Controller in AHCI Mode – DTAM support is enabled – ME is enabled – VE support is enabled
- 3. Intel® AT-d FW Build • Intel® AT-d enabled FW image must have two AT-d soft straps enabled – ICH Danbury Enable – ICH VE Enable/Disable • Refer to FW Bring Up Guide for more details
- 4. Intel CRB BIOS Setup Example • Power on system • Press Del to enter BIOS Setup screen • Press F9 to load optimal settings • Goto Advanced menu – Under IDE Configuration – Select AHCI Mode for SATA Controller – Under Intel ® DT Configuration – Select Enable for DTAM Support • Goto Chipset menu – Under ME Configuration – Select Boot Block HECI -> Select Enable – Select HECI -> Select Enable – Select End of Post S5 -> Select Enable – Select ME HECI -> Select Enable – Under VE Subsystem Configuration – Select VE-VECI -> Select Enable • Press F10 to save and exit from BIOS menu
- 5. Basic Intel® AT-d BIOS Compliance Validation • Intel® AT-d capability Test – Hardware Strap / SoftStraps • Intel® AT-d Enablement Test – AT-d enable in MEBx • Intel® AT-d BIOS compliance Test – VE ready, AHCI, DTAM
- 6. Enable AT-d under MEBx • Press Ctrl-P to enter MEBx menu • Enter MEBx password for the system • Select the Intel® ME Configuration menu option • Go to Intel® ME Features Control menu option. • Select Intel® Anti-Theft Technology ->select Enable Note: If Intel® AT-d menu does not appear in ME Feature Control menu, platform prerequisites are not satisfied.
- 7. Intel® AT-d BIOS Compliance Validation • BIOS VE Compliance can be checked via VEManuf tool • Connect the bootable USB key with VEManuf tool to the AT-d enabled platform • Boot platform to DOS • Run “VEManuf -s” command prompt under DOS • Verify if BIOS is VE AT-d compliant
- 8. VEManuf –s Example • Copyright(C) 2005-08 Intel(R) Corporation. All Rights Reserved • |----------------------------------------------------------------------------| • | VE Manuf Tool 1.00 | • |----------------------------------------------------------------------------| • | Intel AT-d Enabled (ICH SoftStrap)............................ PASSED | • | VE Enabled (ICH SoftStrap)...................................... PASSED | • | AT-d Enabled (MEBX)............................................... PASSED | • | VECI Ready Flag..................................................... PASSED | • | Physical SATA Controller Presence............................ PASSED | • | Virtual SATA Controller Presence.............................. PASSED | • |----------------------------------------------------------------------------| • VEManuf Test Result: PASSED
- 9. Intel® AT-d Activation Flow Set Platform Policies Assign Administrator User Management Device Configuration
- 10. Assign Administrator • Upon entering MEBx, select “Intel® AT-d Configuration” menu • Select “Advanced Configuration” option • Select “Create Administrative Account” • The Admin will be prompted for admin credential entry and verification • Once verified, the Administrator will be prompted to enter a device recovery pass-phrase or have it auto-generated by the platform. • Press Enter to auto-generate the pass-phrase • Store the pass-phrase to a safe place • Press Enter to close the pass-phrase screen
- 11. User Management • Upon entering MEBx, select “Intel® AT-d Configuration” menu • Select “Advanced Configuration” option • Login in as owner • Select “ User Configuration” option • Select “Manage User List” option • Press “Insert” to add user • Enter “Username” • Enter password (should use numeric 0-9) • User will be prompted with the message “Adding user…” after user password entry • The new user will be added to the platform ACL as well • After the user is added, under Manage User List menu, the new user will be shown in the user list. “ResetRequired” will be set as “Yes”. This means at next reboot cycle, the user is required to reset the password at DTAM login screen.
- 12. Device Configuration • Upon entering MEBx, select “Intel® AT-d Configuration” menu • Select “Advanced Configuration” option • Login in as owner • Select “Device Configuration” option • Highlight the HDD to be configured and press “Insert” to configure • Select configuration option to enable encryption for the HDD • HDD status will change to “Configured” state