I-Intel vPro Platform Enterprise Platform yosekelo lweWindows kanye ne-FAQ

Imininingwane

• Igama Lomkhiqizo: Intel vPro
• Ubuchwepheshe: Intel AMT, Intel EMA
• Izici Zokuvikela: Ukuvikelwa kokuhlasela kwe-ROP/JOP/COP, ukutholwa kwe-ransomware, ukuqinisekiswa kwe-OS kwethulwa kwemvelo
• Ukuhambisana: Windows 11 Enterprise, 8th Generation Intel Core processors noma entsha, Intel Xeon W processors

Thola okuningi ekutshaleni kwakho kumadivayisi usebenzisa ubuchwepheshe be-Intel vPro.
I-Intel vPro ihlanganisa uchungechunge lobuchwepheshe obushintshayo obungazuzisa umsebenzi onzima webhizinisi. Ukushuna, ukuhlola, nokuqinisekisa okuqinile kwe-Intel nabaholi bezimboni kusiza ukuqinisekisa ukuthi zonke izisetshenziswa ezine-Intel vPro zisetha izinga lebhizinisi. Ngengxenye ngayinye nobuchwepheshe obuklanyelwe amadivayisi asezingeni eliphezulu, i-IT ingaba nokuqiniseka ukuthi amadivayisi afakwe i-Intel vPro aletha ndawonye ukusebenza kwesigaba sebhizinisi, ukuphepha okuthuthukisiwe kwezingxenyekazi zekhompuyutha, ukuphatha okukude kwesimanje, nokuzinza kwemikhumbi ye-PC. Wazi kanjani ukuthi uthola zonke izinzuzo ze-Intel vPro? Yiziphi izinyathelo okudingeka uzithathe ukuze unike amandla futhi wenze kusebenze zonke izici ozifunayo? Kwezinye izimo, udinga kuphela ukukhetha kubakhiqizi bedivayisi kanye nama-ISV asebevele bakhe izinzuzo ze-Intel vPro ezisombululweni zabo. Ungaqiniseka ukuthi i-Intel vPro inika amandla ukusebenza kwe-IT nokusekelwa, futhi ifaneleka ngokuphelele indawo yokusebenza yesimanje, eyingxube. Ngokusebenza kokulawula idivayisi okukude kwe-Intel vPro, ungakwazi ukukhipha inani elithe xaxa ngokunikeza usekelo lwedivayisi kokubili ngaphakathi kwe-firewall yebhizinisi nangaphandle ngokusebenza okusekelwe emafini ngomhlinzeki wesevisi wamafu (CSP). Lo mhlahlandlela unikeza i-overview yezinzuzo, incazelo yezinketho zakho, kanye nemephu yomgwaqo yokusebenzisa i-Intel vPro Enterprise ye-Windows egcizelela ngokukhethekile ukuphatha ukude usebenzisa i-Intel® Endpoint Management Assistant (Intel® EMA) ukuthatha i-advantagI-Intel® Active Management Technology (Intel® AMT).

Izinzuzo ezingaphandle kwebhokisi
Izinzuzo eziningi ezitholakala nge-Intel vPro “zingaphandle kwebhokisi” futhi zidinga ukusebenzisana kwe-IT okuncane noma akukho nhlobo.

Ukusebenza

Nge-Intel vPro, ukusebenza kwezinga lebhizinisi kwakhelwa ngaphakathi. Ukusebenzisa izishayeli zakamuva nezinguqulo zesofthiwe kuqinisekisa ukuthi uthola i-advan.tagimpilo yebhethri ende, usekelo lwe-Wi-Fi 6 kumakhompyutha aphathekayo, noma ukulungiselelwa kwe-CPU/graphics processing unit (GPU) okusekela ubuhlakani bokwenziwa (AI) nokufunda komshini (ML). Izidingo ezikhula njalo ze-AI ne-ML ekuphatheni inkumbulo, ukuphepha nokubethela, ukusebenzisana, nokwenza kahle kwesistimu kubeka izidingo ezinkulu ekusetshenzisweni kwe-CPU ne-GPU, okungaba nomthelela ekusebenzeni, impilo yebhethri, kanye nokusabela. Ngomthwalo onzima wokusebenza kumakhompyutha aphathekayo neziteshi zokusebenza zamandla aphezulu, amaphrosesa e-Intel® Core™ afakwe i-Intel® Deep Learning Boost (Intel® DL Boost) angathuthukisa umkhawulokudonsa wedivayisi kanye nokukhiqiza ngemisebenzi ehlobene ne-AI ne-ML.

Ukuzinza
Enye inzuzo ebalulekile ye-Intel vPro ukuzinza kwemikhumbi ye-PC. Ukuhlolwa okuqinile kwe-Intel kwezingxenye zehadiwe ezihlukahlukene kumakhompuyutha aphathekayo namadeskithophu kusiza ukuqinisekisa ukuthi zonke izinhlobo zamadivayisi ezakhelwe kubuchwepheshe be-Intel vPro ziletha isisekelo esithembekile nesizinzile sokuphathwa kwemikhumbi okushelelayo kanye nemijikelezo yokuvuselela esikalini somhlaba. Uhlelo lwe-Intel® Stable IT Platform (Intel® SIPP) lunikeza ukuzethemba ngenjongo yokuthi idivayisi ngayinye entsha eyakhelwe ku-Intel vPro izosekelwa futhi itholakale—emhlabeni wonke nangobuningi—okungenani izinyanga eziyi-15. Uma uthuthukela kudivayisi esanda kukhishwa eyakhelwe ku-Intel vPro, ungaqiniseka ukuthi ihadiwe efanayo yemikhumbi yakho izotholakala kuwo wonke umjikelezo wokuthenga. Lokhu kufakwa akuhlanganisi i-CPU kuphela, kodwa futhi izingxenye ze-PC ezisebenza ngobuchwepheshe be-Intel vPro ezifana nama-chipset, ama-adaptha e-Wi-Fi, nama-adaptha e-Ethernet. I-Intel ihlinzeka ngezishayeli eziqinisekisiwe zokukhiqiza ezinguqulweni eziningi ze-Windows kunoma yisiphi isizukulwane seplathifomu, kungaba nge-Windows Update noma ngokubuyekeza abashayeli ngokusebenzisa Isiphathi Sedivayisi. I-Intel SIPP ingakusiza ukuphatha izinguquko ze-OS futhi uthathe i-advantage yokusekelwa okunwetshiwe okuvela ku-Microsoft nganoma yikuphi ukukhishwa kwe-OS.

Ezokuphepha
Njengoba izinhlangano zibhekene nokuchayeka okwengeziwe ezinsongweni nasezingcupheni ze-inthanethi, ungathembela kuzici zokuphepha ze-Intel vPro ukusiza ukuvikela indawo yakho. Lezi zici ziyingxenye ye-Intel® Hardware Shield. Nakuba lezi zici zidinga ukuqaliswa ama-OEM, ama-ISV, noma ozakwethu, ukwenza kusebenze izici zokuphepha ezengeziwe ze-Intel vPro akudingi isenzo se-IT esincane. Lezi zici zifaka i-Intel® BIOS Guard, i-Intel® Runtime BIOS Resilience, Intel® Total Memory Encryption (Intel® TME), ne-Intel® Threat Detection Technology (Intel® TDT) ene-Accelerated Memory Scanning (AMS) nokutholwa okuhlosiwe nge-Advanced Platform Telemetry. Funda iphepha elimhlophe ukuze ufunde kabanzi mayelana nezici ze-Intel Hardware Shield. I-Intel® Virtualization Technology (Intel® VT) nayo ihlanganisa
amandla okuphepha angavikela izindawo ezingase zihlasele. I-Intel VT ivulwa ngokuzenzakalelayo kumadivayisi ane-Intel vPro (ingafakwa kuhlu njenge-Intel VT-x kwezinye izikrini ze-BIOS), nakuba amathuluzi enkampani yangaphandle edingeka ukuze kusetshenziswe amakhono ayo ngokugcwele. Amathuluzi anjalo ahlanganisa i-HP Sure Click,2 Lenovo ThinkShield,3 kanye ne-Dell SafeBIOS.4 Ezinye izici zokuphepha ze-Intel vPro zitholakala kuphela emikhiqizweni ethile ye-ISV noma ye-OEM noma izinguqulo ezizisekelayo. Njengoba lezi zici zingase zinganikwa amandla ngokuzenzakalela, bheka kuThebula 1 ukuze uphindeview Amandla okuphepha asuselwa kuhadiwe atholakala emikhiqizweni ethile noma ezinguqulweni ezithile.

Ithebula 1. Amandla okuphepha asekelwe ku-hardware atholakala kuphela emikhiqizweni ethile noma izinguqulo, noma okungenzeka angavunywanga amandla ngokuzenzakalela

Inzuzo yokuphepha	Ubuchwepheshe be-Intel vPro	Ungayithola kanjani
Thola ukuvikeleka ekubuyiseleni-, gxuma-, futhi uhlelo olugxile ekushayeleni (ROP/JOP/COP) ukuhlasela	I-Intel® Control-flow Enforcement Technology (Intel® CET)	11th Generation Intel Core processors noma entsha, Intel® Xeon® W (Isikhungo sokusebenzela), kanye nenguqulo yakamuva ye Windows 11 Ibhizinisi (10/2021 21H2, 9/2022 22H2, 10/2023 23H2)
Thola i-ransomware nokuziphatha kokuhlasela kwe-crypto-mining futhi uthuthukise ukusebenza ngakho I-GPU iyalayisha	I-Intel TDT	8th Generation Intel Core processors noma entsha, Intel Xeon W (Workstation) processors, kanye nokutholwa kwe-endpoint nesixazululo sokuphendula (EDR) Isixazululo esisekela i-Intel TDT, kuhlanganise I-Microsoft Defender ye-Endpoint, SentinelOne Ubunye kanye BlackBerry Optics
Qinisekisa nge-Cryptographically indawo yokuqalisa i-OS	I-Intel® Trusted Execution Technology (Intel® TXT)	Iyahluka nge-OEM; ungase udinge ukunika amandla i-Intel TXT ku-BIOS ngaphambi kokuba inketho ivele ku-Windows (bona Umfanekiso 1 we i example)

Umfanekiso 1. Ukuqinisekiswa kwe-Cryptographic kwendawo yokuqaliswa kwe-OS kwenziwa ngokunika amandla i-Intel TXT, eboniswe lapha (imininingwane iyahluka nge-OEM)

Ukuphatha

Indawo yokusebenza exubile ingenye yezinselelo ezinkulu ezibhekene nabaphathi be-IT, enabasebenzi abatholakala emahhovisi nasezindaweni ezikude ezahlukahlukene. Abaphathi be-IT ababhekene nezinselele zomsebenzi oyingxubevange banganika amandla ukuxhumeka kokuphatha kumadivayisi nge-Intel AMT ne-Intel EMA, eyakhelwe kumadivayisi ane-Intel vPro. Okusele kwaleli phepha kuhlinzeka ngemininingwane enemininingwane yokuthi ungafaka kanjani ukusebenza kokulawula okukude nge-Intel AMT ne-Intel EMA.

Khulisa ukuphatha okukude
Iminyango ye-IT iphikelele ukweseka ukwanda okungazelelwe kwabasebenzi abakude, okungadinga ukulungiswa kwengqalasizinda yeqiniso elisha labasebenzi. Njengoba kulinganiselwa ukuthi amaphesenti angu-98 ezisebenzi afuna ukusebenza bekude okungenani isikhathi esithile, ukuphatha ukude kwemikhumbi ye-PC yakho kuyoba okubalulekile esikhathini esizayo esibonakalayo.5 I-Intel vPro inikeza isethi ebanzi yamakhono okuphatha akude nge-Intel AMT. I-Intel AMT ingabuyisela ama-PC akho esimweni esaziwayo, ngoxhumo olunezintambo nolungenantambo, ngisho nalapho i-OS iphansi. Abathengisi abaningi besofthiwe yokuphatha uhlelo bahlanganisa ukusebenza kwe-Intel AMT emikhiqizweni yabo kuya kumazinga ahlukahlukene (okungase kudinge amalayisense engeziwe noma ukulungiselelwa), okuhlanganisa:

• I-Microsoft Intune ene-Autopilot ne-Intel EMA
• I-VMware Workspace ONE
• I-Dell Client Command Suite
• Umcibisholo we-Accenture
• I-CompuCom End-User Orchestrator
• Ukuqhubeka
• ConnectWise
• Kaseya
• I-Ivanti
• I-Atos
• Lakeside
• Inkampani engu-Wortmann AG
• I-Terra

Uma usebenzisa imikhiqizo efana nale enamadivayisi akho afakwe i-Intel vPro, kungenzeka ukuthi usuvele uthatha i-advantage yezici zokuphatha ze-Intel AMT. I-Open AMT Cloud Toolkit ihlinzeka ngomthombo ovulekile, ama-microservices amamojula namalabhulali ukuze kuhlanganiswe i-Intel AMT. Ngokuphathwa kwesimanjemanje, okunikwe amandla ngamafu, okungaphandle kwebhendi kwamadivayisi e-Windows atholakala noma yikuphi, okuhlanganisa namadivaysi e-Windows okusebenzela ekhaya angaphandle kwe-firewall futhi axhunywe nge-Wi-Fi, isofthiwe eyinhloko yokuphatha okufanele uyicabangele i-Intel EMA. Ungakwazi ukufaka i-Intel EMA ngaphakathi kwezinqubo zakho zokusekela ze-IT ezikhona futhi uyisebenzisele ukusiza ukwenza ngokuzenzakalelayo imisebenzi ehlukahlukene ye-IT endaweni yokusebenza eyingxube.

Ungawasebenzisa kanjani amandla e-Intel AMT noma yikuphi ngokusebenzisa i-Intel EMA
Lesi sigaba sihlola amanye amakhono aphezulu e-Intel AMT, futhi sinikeza umhlahlandlela wokuthi ungathatha kanjani i-advantage yalawo makhono ngokusebenzisa i-Intel EMA. Qaphela ukuthi i-Intel® Management Engine (Intel® ME) inguqulo engu-11.8 noma entsha iyadingeka ekuphathweni okungaphandle kwebhendi. I-Intel EMA isofthiwe elandekayo kalula (bona isigaba esilandelayo sokufakwa) esikusiza ukuthi usethe futhi ulungise izingxenyekazi zekhompuyutha ze-Intel AMT futhi isebenza njengesiphetho sokusebenzisa i-Intel AMT, eyakhelwe ku-hardware kanye ne-firmware yamadivayisi afakelwe i-Intel vPro. Amanye amakhono e-Intel EMA ahlanganisa amandla okuhamba ngebhayisikili ukude nge-Intel AMT ku-PC ngoxhumo olunezintambo noma lwe-Wi-Fi olusuka efwini, ukuqapha nokulawula ikhompuyutha ephathwayo ekude ngekhibhodi, ividiyo, nokulawula kwegundane (KVM), noma ukunamathisela isithombe sediski esikude ukwenza isoftware yokuthuthukisa noma yokuchibiyela ehhovisi lasekhaya lesisebenzi sakho. I-Intel EMA isofthiwe ekuvumela ukuthi ulawule i-Intel AMT.

Ungayifaka kanjani futhi uyilungiselele kanjani i-Intel EMA

Okokuqala, landa inguqulo yakamuva yesofthiwe ye-Intel EMA. Isoftware yeseva ye-Intel EMA ingafakwa endaweni noma emafini. Ukufakwa emagcekeni kungase kube ngaphakathi kwe-firewall ukuze kuphathe amadivayisi endaweni yebhizinisi noma ngale kwe-firewall ukuze ulawule ngokuphephile amadivayisi ukude. Isiqalo sokufaka endaweni yi-installation.exe file kanye newizadi yokufaka ejwayelekile. Landa umhlahlandlela wokufaka ophelele. Izinqubo zokuthumela ziyahluka uma ufaka iseva ye-Intel EMA efwini, kuye ngokuthi yimuphi umhlinzeki wamafu owusebenzisayo. I-Intel ihlinzeka ngemihlahlandlela yokuthunyelwa kwabahlinzeki abathathu abakhulu bamafu: i-Amazon Web Amasevisi, i-Microsoft Azure, ne-Google Cloud. Okulandelayo imephu yomgwaqo yokufaka ku-Azure njenge-example.

Ukufakwa exampumthombo: IMicrosoft Azure
Izinyathelo ezisezingeni eliphezulu zokufaka iseva ye-Intel EMA ku-Azure yilezi:

1. Dala iqembu lensiza entsha ekubhaliseni okukhona kwe-Azure.
2. Hambisa iqembu lezokuphepha lesicelo se-Azure futhi ulilungiselele njengoba kudingeka.
3. Sebenzisa i-Azure Virtual Network, bese ulungiselela amaqembu okuphepha enethiwekhi ngemithetho yezokuphepha.
4. Hambisa isibonelo se-Azure SQL Database, bese uyengeza kunethiwekhi ekhona.
5. Hambisa umshini we-Windows Server 2022 Datacenter Azure virtual (VM), engeza i-VM kunethiwekhi ebonakalayo ekhona, futhi ulungiselele i-Azure Bastion yokuxhumana okukude kwedeskithophu. Uma kudingeka, sebenzisa isisombululo sokulinganisa ukulayisha sesethi yokutholakala.
6. Xhuma ku-Azure Active Directory (Azure AD) kanye ne-Azure Active Directory Domain Services (Azure AD DS).
7. Hambisa futhi ulungiselele i-Intel EMA ku-Windows Server 2022 Datacenter VM usebenzisa isizindalwazi se-Azure SQL esikhona njengendawo yokugcina yolwazi.

Umfanekiso 2. Isbample yemvelo ye-Intel EMA efakiwe ku-Azure

Ukuqalisa nge-Intel EMA

Ngemuva kokuthi iseva yakho ye-Intel EMA ifakiwe, kungakhathaliseki ukuthi isendaweni noma efwini, uzomisa isiqashi. Isiqashi siyindawo yokusetshenziswa ngaphakathi kweseva ye-Intel EMA emele ibhizinisi lebhizinisi, njengenhlangano noma indawo engaphakathi kwenkampani. Iseva eyodwa ye-Intel EMA ingasekela abaqashi abaningi. Uzodala amaqembu e-endpoint phakathi kwabaqashi, ngaphezu kokudala ama-akhawunti omsebenzisi wabasebenzisi abakwazi ukuphatha lawo maqembu ephoyinti lokugcina. Ngemuva kwalokho uzodala i-Intel AMT profile, dala iqembu lephoyinti lokugcina ngenqubomgomo yeqembu, futhi ukhiqize ukufakwa komenzeli files azofakwa kudivayisi ngayinye ezobuswa leyo nqubomgomo yeqembu. Vula iwindi lesiphequluli, faka i-FQDN/igama lomethuleli elishiwo ngesikhathi sokufakwa kweseva ye-Intel EMA VM yakho, bese ungena ngemvume ngemininingwane yomsebenzisi womlawuli womhlaba wonke elungiselelwe phakathi nokufakwa. (Qaphela ukuthi ungadinga ukungena ngaphakathi kwe-firewall.)

Setha isiqashi futhi udale abasebenzisi.
Uma uqala ukungena ngemvume ngemininingwane yomsebenzisi yomqondisi, uzobona isikrini esithi Ukuqalisa.

1. Chofoza okuthi Dala isiqashi, unikeze isiqashi esisha igama nencazelo, bese uchofoza okuthi Londoloza.
2. Kuphaneli engakwesokunxele, chofoza Abasebenzisi, bese uchofoza Umsebenzisi Omusha ukuze udale umsebenzisi wakho wokuqala, umlawuli wesiqashi.
3. Ungakwazi ukwengeza abasebenzisi abengeziwe njengoba kudingeka, futhi, ngokuzithandela, ubahlele ngamaqembu abasebenzisi. Bonke abasebenzisi banokufinyelela kuzo zonke izindawo zokugcina kumqashi, nakuba iqembu labasebenzisi lingadalwa elinokufinyelela kokufunda kuphela.

Umfanekiso 3. Engeza abasebenzisi kusiqashi sakho se-Intel EMA, uqale ngomlawuli oqashile

Dala i-Intel AMT profile.e

1. Ngena ngemvume ku-Intel EMA njengomlawuli wesiqashi. Kuphaneli engakwesokunxele, chofoza okuthi Endpoint Groups, bese uchofoza i-Intel AMT Profiles phezulu.
2. Chofoza i-Intel AMT Pro entshafile.
3. Esigabeni Esijwayelekile, kubalulekile ukucacisa i-profile igama, ukufinyelela okukude okuqalwe yiklayenti (CIRA), kanye neseva yegama lesizinda elingaxazululeki (i-DNS) yesijobelelo sesizinda se-intranethi se-CIRA.
4. Ngemva kokuqeda ingxenye ethi Okujwayelekile, yiya engxenyeni ethi Izikhombi Zokuphatha, bese ukhetha zonke izici.
5. Kubalulekile ukuqedela isigaba se-Wi-Fi uma uzobe usekela abasebenzi abasebenza ezindaweni ezikude, njengamakhaya abo. Esigabeni se-Wi-Fi, qiniseka ukuthi Vumelanisa nenkundla yokusingatha i-Wi-Fi profiles, Nika amandla ukuxhumeka kwe-WiFi kuzo zonke izimo zamandla esistimu (S1-S5), futhi Nika amandla i-WiFi profile ukwabelana namabhokisi e-UEFI BIOS wonke akhethiwe, bese uchofoza okuthi Gcina.

Umfanekiso 4. Lapho udala i-Intel AMT profile, qiniseka ukuthi uqedela isigaba se-Wi-Fi ukuze ukwazi ukusekela abasebenzi abasebenza ukude

Dala amaqembu okugcina

1. Esigabeni esithi Amaqembu Okugcina, chofoza Iqembu lephoyinti lokugcina elisha.
2. Gcwalisa Izinkambu Zegama Leqembu, Incazelo Yeqembu, kanye Nephasiwedi, bese, ngaphansi Kwenqubomgomo Yeqembu, ukhethe zonke izinto.
3. Chofoza okuthi Londoloza & Ukusetha ngokuzenzakalela kwe-Intel AMT.
4. Esikrinini sokusetha ngokuzenzakalela se-Save & Intel AMT, khetha ibhokisi lokuhlola elithi Kunikwe amandla futhi uqiniseke ukuthi libonisa i-Intel AMT pro yakho.file kanye ne-host-based provisioning (HBP) njengendlela yokwenza kusebenze.
5. Gcwalisa inkambu Yephasiwedi Yomlawuli, bese uchofoza okuthi Gcina.

Umfanekiso 5. Nika amandla abasebenzisi be-Intel EMA abanamalungelo okusebenzisa ezindaweni zokugcina eqenjini lephoyinti lokugcina

Khiqiza futhi ufake ukufakwa kwe-ejenti files
Ngemuva kokuthi udale iqembu lephoyinti lokugcina futhi uchaze inqubomgomo yeqembu yalelo qembu, uzokhiqiza a file ngokufaka i-ejenti ye-Intel EMA emshinini ngamunye oseqenjini.

1. Khetha isevisi ye-Windows efanele (cishe njalo iyinguqulo engu-64-bit), bese uchofoza okuthi Landa.
2. Ngakho, chofoza okuthi Landa eduze kwenqubomgomo yomenzeli file.

Uzodinga lezi ezimbili files ukuze uthole i-togetEMAAgent.exe.exe kanye ne-EMAAgent.msh—ukufaka i-ejenti emshinini ngamunye wokugcina eqenjini. (Qaphela: Uma udinga ukuqamba kabusha i- files, ziqambe kabusha ukuze zisafana.) Ukuze uhlole, ungafaka i-ejenti ye-Intel EMA ngesandla usebenzisa umyalo wokuphatha othi emaagent.exe -fullinstall. Ukuze ukhiqize, cishe uzosebenzisa umsebenzi wokusabalalisa isofthiwe ovela ethuluzini lakho lokuphatha amasistimu.Umfanekiso 6. Landa kokubili files uzodinga ukufaka i-ejenti ye-Intel EMA emshinini ngamunye wephoyinti lokugcina eqenjini lephoyinti lokugcina

Imisebenzi yokuphatha ejwayelekile nge-Intel EMA
Ungasebenzisa i-Intel EMA ekulawuleni umjikelezo wempilo, okuhlanganisa ukusebenza kwedeski losizo kanye ne-IT-task automation. Phakathi kwezici ezintsha zokuphatha ukude i-Intel® Remote Platform Erase (Intel® RPE). Ungasebenzisa lobu buchwepheshe ukuze ulungise kabusha ukude idivayisi ukuze iphinde isetshenziswe, noma ungasusa idatha egcinwe kudrayivu yesitoreji yedivayisi kanye nememori engaphakathi uma ufisa ukuphinda usebenzise umshini. Ungaphinda ugade ilogi yeseva ye-Intel EMA ukuze ibonakale kumicimbi yeseva ye-Intel EMA.

Ukusebenza kwedeski losizo
Kuphaneli yesokunxele yesikrini se-Intel EMA, chofoza Amaphuzu Okugcina ukuze ufinyelele uhla lwemisebenzi yemisebenzi yakho yedeski losizo. Ithebhu ethi Okujwayelekile inikeza ulwazi mayelana nomshini wephoyinti lokugcina elikhethiwe. Ivumela ukulawula isimo samandla salowo mshini, isesha lawo files, ukunikeza i-Intel AMT, ukukhweza isithombe, nokuningi. Ithebhu ye-Hardware Manageability ikunikeza ukufinyelela kumisebenzi ye-Intel AMT engaphandle kwebhendi. Amanye amathebhu ngaphezulu kwesikrini se-Intel EMA (Ideskithophu, Itheminali, Files, Izinqubo, kanye ne-WMI) okwemisebenzi ye-in-band engafinyelelwa uma i-OS eyirimothi ivuliwe futhi isebenza. Ukusebenza kwe-Endpoint kuthuthukisa ikhono lakho lokunikeza ukwesekwa ukude, njengokungathi ukudeski lakho. Umfanekiso 7. Hlola isigaba se-Endpoints ukuze uthole ukuthi i-Intel EMA ingathuthukisa kanjani ukusebenza kwakho kosekelo lwesilawuli kude

Umfanekiso 8. Ithebhu yokuphathwa kwezingxenyekazi zekhompyutha inikeza ukufinyelela kumisebenzi ye-Intel AMT engaphandle kwebhendi efana nezenzo zamandla

Izenzo zokuphatha i-Lifecycle
I-Intel EMA ingenza okungaphezu kokuqapha imishini ye-endpoint. Iphinde inikeze ngokusebenza okukude okunikwe amandla i-KVM ngaphandle kokuthi umshini utholakale ngokoqobo nochwepheshe be-IT. Emishinini engasebenzi noma engaphenduli, i-Intel EMA ingakwazi ukuqala i-PC ikude (njengokungathi umsebenzisi ucindezele inkinobho yamandla), futhi ingakwazi ukukhweza futhi ifunde idiski. Lokhu kuwusizo ikakhulukazi uma umshini ungeke uqalise noma ufunde ku-solid-state drive yayo (SSD) noma idrayivu yokugcina. Ukuqondisa Kabusha kwe-USB (USBR) kanye nezici Zokutholwa Kokuchofoza Okukodwa (OCR) ze-Intel EMA zikuvumela ukuthi ukhweze isithombe sediski esikude (i-.iso noma .img file) endaweni yokugcina ephethwe nge-Intel AMT. Sebenzisa lesi sici ukukhweza isithombe esivulelekayo file futhi uqalise kabusha indawo yokugcina ephethwe esithombeni esigibele file. Ungaphinda uphequlule okuqukethwe kwesithombe esinyusiwe kusuka kukhonsoli yesiphetho esiphethwe nge-KVM (qaphela ukuthi isithombe kufanele siqukathe ikhibhodi ye-USB nezishayeli zegundane ukuze usebenzise i-KVM). Uma usukhwezile isithombe file, ungakwazi ukuqalisa kabusha indawo yokugcina esithombeni esikhweziwe. I-OCR ingakwazi ukuqalisa inqubo yokutakula endaweni yokugcina eya endaweni eyaziwayo yokugcina (I-Intel AMT Out-of-Band [OOB] iyadingeka kulesi sici). Uma udinga ukulungiselela isisebenzi esisha idivayisi noma ufake kabusha i-Windows ukuze ulungise inkinga, ikhono lokukhweza isithombe esisha kudivayisi nomaphi lapho kungaba khona, ngisho nange-Wi-Fi, lingaqeda isidingo sokuba khona kwe-IT okuphathekayo. Qaphela ukuthi i-ISO file kufanele ifomethwe kahle futhi ingathatha amahora ukudawuniloda. Ungafinyelela leli khono esigabeni se-Endpoints se-Intel EMA, lapho ungachofoza khona u-Kwiza isithombe.Umfanekiso 9. Faka isithombe ukuze ufake kabusha i-Windows kudivayisi, noma ngabe leyo divayisi ikuphi

I-Intel Remote Platform Erase (Intel RPE)
I-Intel RPE ikuvumela ukuthi usule ukude yonke idatha nolwazi lwenkundla, okuhlanganisa (ngokuzithandela) ulwazi lwe-Intel AMT yesikhulumi. Lesi sici siwusizo ezenzweni zokuphela kwempilo uma umshini uzoyekwa, udayiswe, noma ugaywe kabusha. Qaphela ukuthi i-Remote Secure Erase (RSE) iyahoxiswa. Ulwazi olwengeziwe nge-Intel RPE lungatholakala naku-Intel AMT Implementation and Reference Guide.

Ithebula 2. Izinyathelo nezici ze-Intel RPE

Gada ilogi yeseva ye-Intel EMA.
Ukuze ufinyelele elogu leseva ye-Intel EMA, uzodinga ukushiya uhlelo lwe-Intel EMA bese uqalisa isifaki seseva ye-Intel EMA kuseva ye-Intel EMA uqobo. Indlela esheshayo yokufeza lokhu ukwethula i-EMAServerInstaller.exe bese uchofoza u-Launch Intel EMA Platform Manager.

1. Ngena ngemvume ku-Intel EMA Platform Manager usebenzisa ukungena komlawuli okudalwe ngesikhathi sokufakwa kweseva ye-Intel EMA.
2. Chofoza i-hosthost:8000.
3. Ukuze ubone amalogi omcimbi, chofoza Imicimbi. Ungakhetha ezansi ukuze ubone yonke imicimbi noma imicimbi ebalulekile kuphela. Kwesokunxele, ungakhetha ukwenza kanjalo view imicimbi yezingxenye zeseva ezihlukene (ezifana ne-EMAAjaxServer, EMAManageabilityServer, ne-EMASwarmServer). Ingxenye ngayinye ikuvumela ukuthi ulandele imicimbi yayo ngesikhathi sangempela ukuze ikusize ngokuxazulula inkinga.

Umfanekiso 10. Qapha imicimbi yeseva ngesikhathi sangempela futhi ulandelele imicimbi ezingxenyeni zeseva ukuze uxazulule izinkinga

Izici ezengeziwe ezitholakala nge-Intel EMA
Ezinye izici ezitholakala nge-Intel EMA console zifaka:

• Isilawuli kude file ukudluliselwa*
• Umugqa womyalo wesilawuli kude*
• Ama-API okuhlanganisa i-Intel EMA noma asebenze njengesisebenzi esizimele sodwa (ikhonsoli ye-Intel EMA Agent iyatholakala ukuze ilandwe ku-Intel EMA API)

*Lezi zici zitholakala kuphela ku-band. Landa ukuphathwa kwe-Intel EMA kanye negayidi yokusebenzisa ukuze uthole ulwazi olwengeziwe.

Isiphetho
I-Intel vPro iletha izinzuzo eziningi enkampanini yakho. Ukusebenza okuningi, ukuzinza, ukuphepha, nokuphatha i-advantagama-Intel vPro ayatholakala kumadivayisi owathenga kubakhiqizi nabathengisi besoftware. Lokhu kufaka phakathi izici zokusebenza okuthuthukisiwe kwebhizinisi, ukuzinza okukhulu kokuphathwa kwemikhumbi okushelelayo, nezici ezibalulekile zokuphepha, njenge-Intel Hardware Shield, ezivikela enanini elikhulayo lezinsongo nezingozi ze-inthanethi. Khumbula, ungathola ukuvikeleka okungcono kakhulu nokuphatha ukude ngokuthumela i-Intel EMA ukuthatha i-advan epheleletage yamakhono we-Intel AMT atholakala nge-Intel vPro ye-Enterprise ye-Windows.

Ufuna ukufunda okwengeziwe? Hlola i-Intel vPro.

1. I-Intel vPro Enterprise ye-Google Chrome ayinazo izici zokuphatha, kuyilapho i-Intel vPro Essentials ine-Intel® Standard Manageability, isethi engaphansi ye-Intel AMT.
2. Intel. "I-Intel Virtualization Technologies Isiza Ukuvikela Izicelo Zephoyinti Lokugcina Nedatha Ngaphandle Kokuthinta Isipiliyoni Somsebenzisi." Novemba 2022.
   intel.com/content/dam/www/central-libraries/us/zu/documents/intel-virtualization-technologies-white-paper.pdf.
3. I-Lenovo. "Ukuphepha okuguquguqukayo ukuvikela abasebenzi besikhathi esizayo." Meyi 2021.
   https://techtoday.lenovo.com/sites/default/files/2023-01/Lenovo-IDG-REL-PTN-Nurture-General-Security-ThinkShield-Solutions-Guide-177-Solution-Guide-MS-Intel-English-WW.pdf.
4. I-Dell Technologies. "Ukuthola ukuphepha okugcwele ngaphezulu nangaphansi kwe-OS."
   delltechnologies.com/asset/en-us/products/security/industry-market/achieving-pervasive-security-above-and-below-the-os-whitepaper.pdf.
5. Forbes. "Izibalo Zomsebenzi Ezikude Nokuthrendayo Ngo-2024." Juni 2023. forbes.com/advisor/business/remote-work-statistics/

Imibuzo Evame Ukubuzwa

Q: Yiziphi izici zokuphepha ezibalulekile ze-Intel vPro?
A: Izici eziyinhloko zokuphepha zifaka phakathi ukuvikela ekuhlaselweni kwe-ROP/JOP/COP, ukutholwa kwe-ransomware, nokuqinisekiswa kwemvelo kwe-OS.

Q: Ngingakwazi kanjani ukunika amandla ukuphathwa okukude nge-Intel AMT ne-Intel EMA?
A: Bheka imanuwali yomsebenzisi ukuze uthole imiyalelo enemininingwane mayelana nokukhipha ukusebenza kokulawula okukude nge-Intel AMT ne-Intel EMA.

Amadokhumenti / Izinsiza

I-Intel vPro Platform Enterprise Platform yosekelo lweWindows kanye ne-FAQ [pdf] Umhlahlandlela Womsebenzisi I-vPro Platform Enterprise Platform ye-Windows Support kanye ne-FAQ, i-Enterprise Platform yokusekelwa kwe-Windows kanye ne-FAQ, yokusekelwa kwe-Windows kanye ne-FAQ, Ukusekela kanye ne-FAQ, kanye ne-FAQ

Izithenjwa

• Imaniwali yosebenzisayo