From Wikipedia, the free encyclopedia
This article has multiple issues. Please help
or discuss these issues on the . ()
of this article is . Relevant discussion may be found on the . Please do not remove this message until . (September 2013) ()
This article may be too technical for most readers to understand. Please
to , without removing the technical details. (September 2013) ()
The examples and perspective in this article may not . Please
or . (September 2013) ()
This article may need to be rewritten entirely to comply with Wikipedia's . . The
may contain suggestions. (February 2014)
Intel vPro technology is an
term used by
for a large collection of
technologies, including ,
(TXT), and
(AMT). When the vPro brand was launched (circa 2007), it was identified primarily with AMT, thus some journalists still consider AMT to be the essence of vPro.
Intel vPro is a brand name for a set of PC hardware features. PCs that support vPro have a vPro-enabled processor, a vPro-enabled chipset, and a vPro-enabled
as their main elements.
A vPro PC includes:
Multi-core, multi-threaded Xeon or Core processors.
Intel Active Management Technology (Intel AMT), a set of hardware-based features targeted at businesses, allow remote access to the PC for management and security tasks, when an OS is down or PC power is off. Note that AMT is not the same as Intel vP AMT is only one element of a vPro PC.
Remote configuration technology for AMT, with
security. Remote configuration can be performed on "bare-bones" systems, before the OS and/or software management agents are installed.
(laptop) network connection.
(Intel TXT), which verifies a launch environment and establishes the root of trust, which in turn allows software to build a
for . Intel TXT also protects secrets during power transitions for both orderly and disorderly shutdowns (a traditionally vulnerable period for security credentials).
Support for ,
(SDN), and
(NAP) in laptops, and support for 802.1x and Cisco SDN in desktop PCs. Support for these security technologies allows Intel vPro to store the security posture of a PC so that the network can authenticate the system before the OS and applications load, and before the PC is allowed access to the network.
Intel Virtualization Technology, including Intel VT for memory, CPU, and Directed I/O, to support . Intel VT is hardware-based technology, not software-based virtualization. Intel VT lets you run multiple OSs (traditional virtualization) on the same PC or run a specialized or critical application in a separate space—a virtual PC on the physical system—in order to help protect the application or privacy of sensitive information.
that, when supported by the OS, can help prevent some types of buffer overflow attacks.
Support for
, including Microsoft Windows Vista BitLocker with a
version 1.2 and Intel graphics support for Windows Vista Aero .
is the set of management and security features built into vPro PCs that makes it easier for a sys-admin to monitor, maintain, secure, and service PCs. Intel AMT (the management technology) is sometimes
(the PC "platform"), because AMT is one of the most visible technologies of an Intel vPro-based PC.
Intel AMT includes:
Encrypted remote power up/down/reset (via , or WOL)
Remote/redirected
(via integrated device electronics redirect, or IDE-R)
Console redirection (via , or SOL)
Preboot access to
Programmable filtering for inbound and outbound
presence checking
policy-based alerting
Access to system information, such as the PC's
(UUID), hardware asset information, persistent event logs, and other information that is stored in dedicated memory (not on the hard drive) where it is accessible even if the OS is down or the PC is powered off.
Hardware-based management has been available in the past, but it has been limited to
(of computers that request it) using
allocation and diskless workstations, as well as
for remotely powering on systems.
Starting with vPro with AMT 6.0, PCs with i5 or i7 processors and embedded Intel graphics, now contains an Intel proprietary embedded . You can connect out-of-band using dedicated VNC-compatible viewer technology, and have full KVM (keyboard, video, mouse) capability throughout the power cycle—including uninterrupted control of the desktop when an operating system loads. Clients such as VNC Viewer Plus from
also provide additional functionality that might make it easier to perform (and watch) certain Intel AMT operations, such as powering the computer off and on, configuring the BIOS, and mounting a remote image (IDER).
Not all i5 & i7 Processors with vPro may support KVM capability. This depends on the OEM's BIOS settings as well as if a discrete graphics card is present.
support KVM ability.
Intel vPro supports
wireless communication for all remote management features for PCs inside the corporate . Intel vPro supports
communication for some remote management features for wired and
PCs outside the corporate .
Laptops with vPro include a
and support
// wireless .
Intel vPro PCs support wireless communication to the AMT features.
For wireless laptops on
power, communication with AMT features can occur when the system is
and connected to the corporate . This communication is available if the
is down or
are missing.
AMT out-of-band communication and some AMT features are available for wireless or wired laptops connected to the corporate network over a host OS-based
(VPN) when laptops are
and working properly.
A wireless connection operates at two levels: the wireless network interface (WLAN) and the interface driver executing on the platform host. The network interface manages the RF communications connection.
If the user turns off the wireless transmitter/receiver using either a hardware or software switch, Intel AMT cannot use the wireless interface under any conditions until the user turns on the wireless transmitter/receiver.
Intel AMT Release 2.5/2.6 can send and receive management traffic via the WLAN only when the platform is in the
power state (the computer is on and running). It does not receive wireless traffic when the host is asleep or off. If the power state permits it, Intel AMT Release 2.5/2.6 can continue to send and receive out-of-band traffic when the platform is in an Sx state, but only via a wired LAN connection, if one exists.
Release 4.0 and later releases support wireless out-of-band manageability in Sx states, depending on the power setting and other configuration parameters.
Release 7.0 supports wireless manageability on desktop platforms.
When a wireless connection is established on a host platform, it is based on a wireless profile that sets up names, passwords and other security elements used to authenticate the platform to the wireless Access Point. The user or the IT organization defines one or more profiles using a tool such as Intel PROSet/Wireless Software. In release 2.5/6, Intel AMT must have a corresponding wireless profile to receive out-of-band traffic over the same wireless link. The network interface API allows defining one or more wireless profiles using the same parameters as the Intel PROSet/Wireless Software. See Wireless Profile Parameters. On power-up of the host, Intel AMT communicates with the wireless LAN driver on the host. When the driver and Intel AMT find matching profiles, the driver routes traffic addressed to the Intel AMT device for manageability processing. With certain limitations, Intel AMT Release 4.0/1 can send and receive out-of-band traffic without an Intel AMT configured wireless profile, as long as the host driver is active and the platform is inside the enterprise.
In release 4.2, and on release 6.0 wireless platforms, the WLAN is enabled by default both before and after configuration. That means that it is possible to configure Intel AMT over the WLAN, as long as the host WLAN driver has an active connection. Intel AMT synchronizes to the active host profile. It assumes that a configuration server configures a wireless profile that Intel AMT uses in power states other than S0.
When there is a problem with the wireless driver and the host is still powered up (in an S0 power state only), Intel AMT can continue to receive out-of-band manageability traffic directly from the wireless network interface.
For Intel AMT to work with a wireless LAN, it must share IP addresses with the host. This requires the presence of a DHCP server to allocate IP addresses and Intel AMT must be configured to use DHCP.
Intel vPro PCs support
communication while .
vPro PCs version 4.0 or higher support
for mobile communications by establishing a secure tunnel for
AMT communication with the
(operating on an open, wired
outside the corporate ). Secure communication with AMT can be established if the laptop is powered down or the OS is disabled. The AMT encrypted communication tunnel is designed to allow sys-admins to access a laptop or desktop PC at satellite offices where there is no on-site
Secure communications outside the corporate
depend on adding a new element—a management presence server (Intel calls this a "vPro-enabled gateway")—to the network infrastructure. This requires integration with
manufacturers, firewall vendors, and vendors who design
to create infrastructure that supports encrypted
. So although encrypted roaming communication is enabled as a feature in vPro PCs version 4.0 and higher, the feature will not be fully usable until the infrastructure is in place and functional.
vPro security technologies and methodologies are designed into the PC's
and other system hardware. During deployment of vPro PCs, security credentials, keys, and other critical information are stored in
(not on the ), and erased when no longer needed.
According to Intel, it is possible to disable AMT through the BIOS settings, however, there is apparently no way for most users to detect outside access to their PC via the vPro hardware-based technology. Moreover, Sandy Bridge and future chips will have, "...the ability to remotely kill and restore a lost or stolen PC via 3G."
On May 1, [2017] Intel published a security advisory regarding a firmware vulnerability in certain systems that utilize Intel Active Management Technology (Intel AMT), Intel Standard Manageability (Intel ISM), or Intel Small Business Technology (Intel SBT). The vulnerability is potentially very serious, and could enable a network attacker to remotely gain access to businesses PCs and workstations that use these technologies. We urge people and companies using business PCs and devices that incorporate Intel AMT, Intel ISM or Intel SBT to apply a firmware update from your equipment manufacturer when available, or to follow the steps detailed in the mitigation guide.
Many vPro features, including AMT, are implemented in the
(ME), a distinct processor in the chipset running , which has been found to have numerous . Unlike for AMT, there is generally no official, documented way to disable the Management Engine (ME); it is always on unless it is not enabled at all by the OEM.
Intel vPro supports industry-standard methodologies and , as well as other vendors' security features:
(Intel TXT)
Industry-standard
version 1.2 (TPM)
Support for ,
(PXE), and
(SDN) in desktop PCs, and additionally
(NAP) in laptops
Execute Disable Bit
(Intel VT(Vt-x+Vt-d))
Intel VMCS-Intel Virtual Machine Control Structure Shadowing
Intel Platform Trust Technology-PTT
Intel Data Protection Technology
Intel Identity Protection technology
Intel Secure key
Technology
Intel Boot Guard
Intel OS Guard
Intel Active Management Technology-Intel AMT
Intel Stable Image Platform Program-SIPP
Intel Small Business Advantage-Intel SBA
Intel Boot Guard[]
Intel Boot Guard is a processor feature that prevents the computer from running
images not released by the system manufacturer. When turned on, the processors verifies a signature contained in the firmware image before executing it, using the hash of the public half of the signing key, which is fused into the system's
(PCH) by the system manufacturer (not by Intel). Intel Boot Guard is an optional processor feature, meaning that it does not need to be activated during the system manufacturing. As a result, Intel Boot Guard, when activated, makes it impossible for
to install replacement firmware such as .
Intel vPro uses several industry-standard security technologies and methodologies to secure the remote vPro . These technologies and methodologies also improve security for accessing the PC's critical system data,
settings, Intel AMT management features, and other sensit and protect security credentials and other critical information during deployment (setup and configuration of Intel AMT) and vPro use.
(TLS) protocol, including
TLS () to secure communications over the out-of-band network interface. The TLS implementation uses
128-bit encryption and
keys with modulus lengths of 2048 bits.
HTTP digest authentication protocol as defined in . The management console authenticates IT administrators who manage PCs with Intel AMT.
to Intel AMT with
authentication, based on the Microsoft
protocols.
(PRNG) in the
of the AMT PC, which generates high-quality
for secure communication.
firmware images (signed by Intel) are permitted to load and execute.
Tamper-resistant and access-controlled storage of critical management data, via a protected, persistent (nonvolatile)
(a memory area not on the ) in the Intel AMT hardware.
for Intel AMT realms and other management functions.
This section has multiple issues. Please help
or discuss these issues on the . ()
This section possibly contains inappropriate or misinterpreted
that do not
the text. Please help
by checking for citation inaccuracies. (February 2014) ()
The first release of Intel vPro was built with an Intel
Duo processor. The current versions of Intel vPro are built into systems with
Intel 7th Generation Core i5 & i7 processors.
PCs with Intel vPro require specific . Intel vPro releases are usually identified by their AMT version.
Laptops with Intel vPro require:
For Intel AMT release 9.0 (4th Generation Intel Core i5 and Core i7):
22 nm Intel 4th Generation Core i7 Mobile processors
22 nm Intel 4th Generation Core i5 Mobile processors
Mobile QM87 chipsets
For Intel AMT release 8.0 (3rd Generation Intel Core i5 and Core i7):
32 & 45 nm Intel 3rd Generation Core i7 Mobile processors
32 & 45 nm Intel 3rd Generation Core i5 Mobile processors
Mobile QM77 & Q77 chipsets
For Intel AMT release 4.1 (Intel Centrino 2 with vPro technology):
45 nm Intel Core2 Duo processor T, P sequence , , 9600; small form factor P, L, U sequence 9300 and 9400, and Quad processor Q9100
Mobile 45 nm Intel GS45, GM47, GM45 and PM45 Express chipsets (Montevina with ) with 1066 FSB, 6 MB L2 cache, ICH10M-enhanced
For Intel AMT release 4.0 (Intel Centrino 2 with vPro technology):
45 nm Intel Core2 Duo processor T, P sequence , , 9600; small form factor P, L, U sequence 9300 and 9400, and Quad processor Q9100
Mobile 45 nm Intel GS45, GM47, GM45 and PM45 Express chipsets (Montevina) with 1066 FSB, 6 MB L2 cache, ICH9M-enhanced
For Intel AMT release 2.5 and 2.6 (Intel Centrino with vPro technology):
Intel Core2 Duo processor T, L, and U 7000 sequence3, 45 nm Intel Core2 Duo processor T8000 and T9000
Mobile Intel 965 (Broadwater-Q) Express chipset with ICH8M-enhanced
Note that AMT release 2.5 for wired/wireless laptops and AMT release 3.0 for desktop PCs are concurrent releases.
Desktop PCs with vPro (called "Intel Core 2 with vPro technology") require:
For AMT release 5.0:
Intel Core2 Duo processor E8600, E8500, and E0;nm Intel Core2 Quad processor Q9650, Q9550, and Q9400
Intel Q45 (Eaglelake-Q) Express chipset with ICH10DO
For AMT release 3.0, 3.1, and 3.2:
Intel Core2 Duo processor E6550, E6750, and E0;nm Intel Core2 Duo processor E8500, E8400, E8300 and E0;nm Intel Core2 Quad processor Q9550, Q9450 and Q9300
Intel Q35 (Bearlake-Q) Express chipset with ICH9DO
Note that AMT release 2.5 for wired/wireless laptops and AMT release 3.0 for desktop PCs are concurrent releases.
For AMT release 2.0, 2.1 and 2.2:
Intel Core 2 Duo processor E6300, E6400, E6600, and E6700
Intel Q965 (Averill) Express chipset with ICH8DO
There are numerous Intel brands. However, the key differences between vPro (an umbrella marketing term),
(a technology under the vPro brand), Intel Core i5 and Intel Core i7 (a branding of a package of technologies), and Core i5 and Core i7 (a processor) are as follows:
The Core i7, the first model of the i series was launched in 2008, and the less-powerful i5 and i3 models were introduced in 2009 and 2010, respectively. The microarchitecture of the Core i series was code-named Nehalem, and the second generation of the line was code-named Sandy Bridge.
was a branding of a package of technologies that included
and, originally, the Intel Core 2 Duo. The Intel Centrino 2 brand was applied to mobile PCs, such as
and other small devices. Core 2 and Centrino 2 have evolved to use Intel's latest 45-nm manufacturing processes, have
processing, and are designed for .
Intel vPro is a brand name for a set of Intel technology features that can be built into the hardware of the laptop or desktop PC. The set of technologies are targeted at businesses, not consumers. A PC with the vPro brand often includes , Intel
(Intel VT), Intel
(Intel TXT), a
network connection, and so on. There may be a PC with a Core 2 processor, without vPro features built in. However, vPro features require a PC with at least a Core 2 processor. The technologies of current versions of vPro are built into PCs with some versions of Core 2 Duo or Core 2 Quad processors (45 nm), and more recently with some versions of Core i5 and Core i7 processors.
Intel AMT is part of the Intel Management Engine that is built into PCs with the Intel vPro brand. Intel AMT is a set of remote management and security hardware features that let a sys-admin with AMT security privileges access system information and perform specific remote operations on the PC. These operations include remote power up/down (via ), remote / redirected
(via integrated device electronics redirect, or ), console redirection (via ), and other remote management and security features.
(Client-Initiated Remote Access)
In some modern Intel CPU designs, PCH and the processor are integrated into the same package.
(PDF). Intel. August 16, 2012.
. Tom's Hardware Guide.
. ars technica.
. Intel. . Archived from
. ChannelWeb.
. ChannelWeb.
(PDF). Intel.
. Intel. Archived from
. Intel. Archived from
(PDF). Intel. 2007.
. Intel. .
. Intel.[]
(PDF). Intel. 2007.
(PDF). Wipro Technologies.
(PDF). Intel.
. ars technica.
. Intel. Archived from
on March 26, 2008.
. Intel. Archived from
(PDF). Intel. Archived from
(PDF) on .(see CIRA configuration discussion)
Hodgin, Rick C. (). . TG Daily.
Hachman, Mark (). . PC Magazine.
. Extreme Tech.
Smith, Ryan (August 11, 2014). .
Hoffman, Chris (February 13, 2015). .
Garrett, Matthew (February 16, 2015). . mjg59.dreamwidth.org 2015.
(PDF). Intel.
. Intel. Archived from
. Intel. . Archived from
. Intel. Archived from
on March 15, 2008.
. Ark.intel.com.
. Ark.intel.com.
. Ark.intel.com.
. Ark.intel.com.
. Ark.intel.com.
. Intel. . Archived from
(PDF). Intel. 2007.
. Intel. . Archived from
. ChannelWeb. August 27, 2007. Archived from
: Hidden categories:Intel Q35 Express Chipset (Intel 82Q35 Graphics and Memory Controller)
芯片组 参数
全名Intel Q35 Express Chipset (Intel 82Q35 Graphics and Memory Controller)
用途台式机
代号Bearlake
状态已发布发布日期Q3'07支持的前端总线1333MHz / 1066MHz / 800MHz前端总线奇偶否提供嵌入式方案是最大散热设计功耗（TDP）15 W建议的客户价格T&R; : $20.00最大内存大小（取决于内存类型）8 GB内存类型DDR2-667 / DDR2-800内存通道数2最大内存带宽6.4 GB/s物理地址扩展36-bitECC 内存支持否集成显卡是图形输出QXGA, TV Out, SDVO, HDMI, DVI英特尔(R) 清晰视频技术否显示支持数量2要求 Macrovision* 许可否PCI Express 修订版1.1PCI-e 配置1x16最大 CPU 配置1TCASE温度106°C封装大小34mm x 34mm低卤素选项可用参见 MDDS英特尔(R) 定向 I/O 虚拟化技术是英特尔(R) 快速内存访问否英特尔(R) 弹性内存技术是
CPU 性能排名
评分 & 参数
小米（MI）极简都市双肩包
一包走天下，凯乐石30L旅行背包
兼容的CPU (部分)
Passmark(多核)&
Superpi1M(单核)
Superpi32M(单核)
wPrime32M(多核)
wPrime1024M(多核)
CinebenchR10 32(单核)
CinebenchR10 32(多核)
CinebenchR115&
3DMark06CPU&
Fritz国际象棋(多核)&
Win7CPU指数
Win8CPU指数
热设计功耗
945G, 945...
945G, 945...
945G, 945...
945G, 945...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
老酷睿2双核Desktop
老酷睿2双核Desktop
945G, 945...
老酷睿2双核Desktop
945G, 945...
老酷睿2双核Desktop
945G, 945...
老酷睿2双核Desktop
945G, 945...
老酷睿2双核Desktop
LGA775, P...
945G, 945...
老酷睿2双核Desktop
945G, 945...
老酷睿2双核Desktop
LGA775, P...
老酷睿2双核Desktop
945G, 945...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
945G, 945...
老酷睿2双核Desktop
945G, 945...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
3210, G31...
老酷睿2双核Desktop
G31, G35,...
老酷睿2双核Desktop
G31, G35,...
老酷睿2四核
Kentsfield
G965, P96...
老酷睿2四核
Kentsfield
G965, P96...
老酷睿2四核
G35, G33,...
老酷睿2四核
G35, G33,...
老酷睿2四核
G35, G33,...
老酷睿2四核
G35, G33,...
老酷睿2四核
G35, G33,...
老酷睿2四核
G35, G33,...
老酷睿2四核
3210, G35...
老酷睿2四核
3210, G35...
老酷睿2四核
G35, G33,...
老酷睿2四核
G35, G33,...
老酷睿2四核
G35, G33,...
老酷睿2四核
G35, G33,...
LGA775, P...
945G, 945...
945G, 945...
945G, 945...
945G, 945...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
G31, G35,...
注意: 个人电脑主板搭配一般可参考同插槽CPU或芯片组，但需确认。
(C) 版权所有
YouCPU.com