**********************************************************************
*
* Copyright (c) 2006-2007 Intel Corporation.
* Intel(R) Active Management Technology User Notification Service - version 2.6.0
*
**********************************************************************
**********************************************************************
* 1. Overview
**********************************************************************
Intel® AMT 2.5 shall write user notifications to the local host OS event log for the
purpose of notifying end users of predefined events such as when critical System Defense
policies are applied by the ME FW. Intel shall provide documentation on how the ISV can
extract and consume these events from the event log for use in their applications.
**********************************************************************
* 2. System Requirements
**********************************************************************
The Intel(R) Active Management Technology User Notification Service is supported on the following operating systems:
- Windows* XP SP1/2 (32 bit)
- Windows* Vista (32 and 64 bit)
**********************************************************************
* 3. Install steps
**********************************************************************
UNS.exe lies inside the LMS_SOL. To get UNS to work please follow following steps:
1) TLS:
If AMT is configured to work with TLS then any application that wants to
communicate with AMT must be able to verify the server certificate that AMT sends.
To do that, the root certificate (which signed the AMT certificate) must be
installed (by the IT administrator) in Windows’s trusted root certificate store.
The problem here is that UNS, as a service, runs in the system context
(not as a user process), and as such does not see the same certificate store.
For UNS to have access to the root certificate, it must be installed using the
“mmc” tool, as is specified in step 4 in:http://support.microsoft.com/kb/901183/
2) Mutual Authentication TLS:
If AMT is configured to use mutual authentication TLS for local
(this can be set separately for remote and local), then when local applications
try to connect, AMT will require from them a client certificate for verification.
This client certificate must be installed in Windows’s personal certificate store.
Again, like for the server certificate, UNS being a service is a problem, and the
IT administrator must install the client certificate using steps 1-3 of the above
link.
Furthermore, UNS must be told which client certificate in the store to actually use,
and this can be done with the following command line argument: “-cert <cert name>”.
(Services can receive arguments either on the command line (using the “sc” command)
or in the graphical service controller window.)
3) HTTP Credentials:
Regardless of the TLS situation, UNS uses SOAP calls to AMT and requires
credentials. UNS calls two SOAP services in AMT: User Notification and Endpoint
Access Control. These two realms might have different access privileges
(i.e. different users can be part of these realms).
Now, by default, there is no need for credentials to access the above two realms,
so UNS should just work. However, the administrator can decide to block this
anonymous access and mandate credentials for one or both of the above realms.
This can be done using the SetRealmAuthOptions SOAP command in the Security
Administration interface.
If credentials are needed for these realms they need to be passed to the
UNS as arguments: “-unsUser <user name> -unsPass <password>” for the User
Notification realm, and “-eacUser <user name> -eacPass <password>” for the Endpoint
Access Control realm.
A property of the above credentials is that UNS saves them for the next time it
is run. This means that UNS can be started once with the credentials as arguments,
stopped, and the re-started without the credentials, and they will still be used
(as long as AMT is configured to require them). This allows the administrator to
run UNS without the credentials showing in the process table as the UNS process’s
arguments.
****************************************
* INTEL SOFTWARE LICENSE AGREEMENT
* (OEM / IHV / ISV Distribution &
* Single User)
****************************************
IMPORTANT - READ BEFORE COPYING,
INSTALLING OR USING. Do not use or load
this software and any associated
materials (collectively, the Software)
until you have carefully read the
following terms and conditions. By
loading or using the Software, you agree
to the terms of this Agreement. If you
do not wish to so agree, do not install
or use the Software.
Please also note:
1 If you are an Original Equipment
Manufacturer (OEM), Independent
Hardware Vendor (IHV), or Independent
Software Vendor (ISV), this complete
LICENSE AGREEMENT applies;
2 If you are an End-User, then only
Exhibit A, the INTEL SOFTWARE LICENSE
AGREEMENT, applies.
For OEMs, IHVs, and ISVs:
LICENSE. This Software is licensed for
use only in conjunction with Intel
component products. Use of the
Software in conjunction with non-Intel
component products is not licensed
hereunder. Subject to the terms of this
agreement, Intel grants to you a
nonexclusive, nontransferable,
worldwide, fully paid-up license under
Intels copyrights to:
a) use, modify and copy Software
internally for your own
development and maintenance
purposes; and
b) modify, copy and distribute
Software, including derivative
works of the Software, to your
end-users, but only under a
license agreement with terms at
least as restrictive as those
contained in Intel's Final,
Single User License Agreement,
attached as Exhibit A; and
c) modify, copy and distribute
the end-user documentation
which may accompany the
Software, but only in
association with the Software.
If you are not the final manufacturer or
vendor of a computer system or software
program incorporating the Software, then
you may transfer a copy of the Software,
including derivative works of the
Software (and related end-user
documentation) to your recipient for
use in accordance with the terms of this
agreement, provided such recipient agrees
to be fully bound by the terms hereof.
You shall not otherwise assign,
sublicense, lease, or in any other way
transfer or disclose Software to any
third party. You shall not reverse-
compile, disassemble or otherwise
reverse-engineer the Software.
Except as expressly stated in this
agreement, no license or right is
granted to you directly or by
implication, inducement, estoppel
or otherwise. Intel shall have the
right to inspect or have an
independent auditor inspect your
relevant records to verify Your
compliance with the terms and
conditions of this agreement.
CONFIDENTIALITY. If you wish to
have a third party consultant or
subcontractor ("Contractor") perform
work on your behalf which involves
access to or use of Software, You
shall obtain a written confidentiality
agreement from the Contractor which
contains terms and obligations with
respect to access to or use of
Software no less restrictive than
those set forth in this agreement
and excluding any distribution
rights, and use for any other
purpose. Otherwise, you shall not
disclose the terms or existence of
this agreement or use Intel's name
in any publications, advertisements,
or other announcements without Intel's
prior written consent. You do not
have any rights to use any Intel
trademarks or logos.
OWNERSHIP OF SOFTWARE AND COPYRIGHTS.
Title to all copies of the Software
remains with Intel or its suppliers.
The Software is copyrighted and
protected by the laws of the United
States and other countries, and
international treaty provisions. You
may not remove any copyright notices
from the Software. Intel may make
changes to the Software, or to items
referenced therein, at any time and
without notice, but is not obligated
to support or update the Software.
Except as otherwise expressly
provided, Intel grants no express or
implied right under Intel patents,
copyrights, trademarks, or other
intellectual property rights.
You may transfer the Software only if
the recipient agrees to be fully
bound by these terms and if you retain
no copies of the Software.
LIMITED MEDIA WARRANTY. If the
Software has been delivered by Intel
on physical media, Intel warrants the
media to be free from material physical
defects for a period of ninety (90)
days after delivery by Intel. If such
a defect is found, return the media to
Intel for replacement or alternate
delivery of the Software as Intel may
select.
EXCLUSION OF OTHER WARRANTIES. EXCEPT
AS PROVIDED ABOVE, THE SOFTWARE IS
PROVIDED "AS IS" WITHOUT ANY EXPRESS OR
IMPLIED WARRANTY OF ANY KIND INCLUDING
WARRANTIES OF MERCHANTABILITY,
NONINFRINGEMENT, OR FITNESS FOR A
PARTICULAR PURPOSE. Intel does not
warrant or assume responsibility for
the accuracy or completeness of any
information, text, graphics, links or
other items contained within the
Software.
LIMITATION OF LIABILITY. IN NO EVENT
SHALL INTEL OR ITS SUPPLIERS BE
LIABLE FOR ANY DAMAGES WHATSOEVER
(INCLUDING, WITHOUT LIMITATION, LOST
PROFITS, BUSINESS INTERRUPTION, OR
LOST INFORMATION) ARISING OUT OF THE
USE OF OR INABILITY TO USE THE
SOFTWARE, EVEN IF INTEL HAS BEEN
ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES. SOME JURISDICTIONS PROHIBIT
EXCLUSION OR LIMITATION OF LIABILITY
FOR IMPLIED WARRANTIES OR CONSEQUENTIAL
OR INCIDENTAL DAMAGES, SO THE ABOVE
LIMITATION MAY NOT APPLY TO YOU. YOU
MAY ALSO HAVE OTHER LEGAL RIGHTS THAT
VARY FROM JURISDICTION TO JURISDICTION.
TERMINATION OF THIS AGREEMENT. Intel
may terminate this Agreement at any
time if you violate its terms. Upon
termination, you will immediately
destroy the Software or return all
copies of the Software to Intel.
APPLICABLE LAWS. Claims arising
under this Agreement shall be
governed by the laws of California,
excluding its principles of conflict
of laws and the United Nations
Convention on Contracts for the Sale
of Goods. You may not export the
Software in violation of applicable
export laws and regulations. Intel is
not obligated under any other
agreements unless they are in writing
and signed by an authorized
representative of Intel.
GOVERNMENT RESTRICTED RIGHTS. The
Software is provided with "RESTRICTED
RIGHTS." Use, duplication, or
disclosure by the Government is
subject to restrictions as set forth in
FAR52.227-14 and DFAR252.227-7013 et seq.
or their successors.
Use of the Software by the Government
constitutes acknowledgment of Intel's
proprietary rights therein.
Contractor or Manufacturer is Intel
Corporation, 2200 Mission College Blvd.,
Santa Clara, CA 95052.
Download Driver Pack
After your driver has been downloaded, follow these simple steps to install it.
Expand the archive file (if the download file is in zip or rar format).
If the expanded file has an .exe extension, double click it and follow the installation instructions.
Otherwise, open Device Manager by right-clicking the Start menu and selecting Device Manager.
Find the device and model you want to update in the device list.
Double-click on it to open the Properties dialog box.
From the Properties dialog box, select the Driver tab.
Click the Update Driver button, then follow the instructions.
Very important: You must reboot your system to ensure that any driver updates have taken effect.
For more help, visit our Driver Support section for step-by-step videos on how to install drivers for every file type.