Showing posts with label Intel DQ965GF. Show all posts
Showing posts with label Intel DQ965GF. Show all posts

Friday, 22 May 2009

Intel vPro System Defense Utility Now Available

We use the Intel System Defense Utility to manage our smaller clients that have vPro enabled workstations.

The utility gives us the ability to power cycle the system, remote boot via image for troubleshooting or OS load, and more.

It is available here: Intel System Defense Utility.

image

Some prep work on the workstation needs to happen prior to being able to connect with the ISDU.

  • AMT password set.
  • System Name.
  • AMT management set to SMB versus Enterprise.
  • AMT set to the newest version.

We keep a record of all of the system names and their AMT passwords.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*All Mac on SBS posts will not be written on a Mac until we replace our now missing iMac! (previous blog post)

Windows Live Writer

Wednesday, 6 May 2009

Intel System Defense Utility Is Not Available?

We use the Intel System Defense Utility to manage our vPro enabled workstations here in our shop as well as at client sites.

image

Apparently the utility has been pulled:

image

The e-mail link in the above screenshot is live on the download site here: Intel System Defense Utility Download.

The text file does not mention anything other than the fact that it has been temporarily pulled:

Please note that the Intel(r) System Defense Utility is temporarily unavailable. Please check back in the future. We apologize for any inconvenience this may cause. Please contact your local Intel Customer Center for additional information. You may contact Intel Customer Support by visiting http://supportmail.intel.com/

Hopefully we will see the download reappear soon!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*All Mac on SBS posts will not be written on a Mac until we replace our now missing iMac! (previous blog post)

Windows Live Writer

Friday, 30 November 2007

System Builder Tip: Intel DQ965GF Series BIOS update 2007-11-27

A new set of updates for the DQ965GF: We always download the BIOS file to a bootable Technician's Thumb Drive and run it from a DOS prompt. The other update methods include a Windows Executable that one runs after downloading. Note that it will automatically reboot the system into a BIOS update session.

While Intel provides a recovery BIOS setup if the system is downed during the flash, always have the system plugged into a UPS that will allow for at least 5 minutes of on-battery time while flashing the BIOS. This will save a lot of time and heartache if the power ever fluctuates or goes out on a client's system during the update.

Our workbench has two separate 20A circuits, each protected by an APC 1500VA RS series UPS. We have two more 20A circuits and additional APC 1500VA RS UPSs available if we have the need for more.

Once the update has completed, before booting the OS on the new BIOS version, always enter the BIOS after the update to verify that all of the settings are the same as they were before the update. A switched off RAID controller can cause havoc with the OS!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Saturday, 3 November 2007

Intel DQ965GF - Error on PCI Simple Communications Controller in Device Manager

We just completed a StoragCraft ShadowProtect v3 P2P migration of our data mule system from an Intel D945GTP series with a Pentium D 2.8GHz plugged into it to an Intel DQ965GFEKR series with an E6600 2.4GHz Core 2 Duo plugged in.

Other than a hiccup with the recovery portion of the P2P transfer (will blog about that in a separate post), things went relatively well.

After installing all of the updated drivers into Windows XP Pro SP2 on the system, we still had an error in the Device Manager: PCI Simple Communications Controller - Drivers not installed.

The other message we were getting, which was wrong, was from the AMT driver: AMT is not enabled. We set it up in the BIOS, so the above error was somehow tied to the AMT setup.

In the Device Manager, the PCI Simple Communications Controller did not give us any indication as to what it was though.

The solution was pretty simple though:

Intel Support Site

One needed to find out what the device was and download the driver via Intel's support site!

Intel site links: If the download link does not work, then click the link above it to hit Intel's Download Finder site and search for the Management Engine Interface Driver. Many results for the same file will come up.

Install the driver, reboot the system, and the AMT message will now indicate that AMT is enabled if it was during board setup.

UPDATE: Note that for Vista x64 and DQ965GF and DQ35JOE boards, one needs to hit the following download links: Note that the 64bit version in the second link will work for both boards.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

Thursday, 1 November 2007

Windows Vista - BitLocker Error - "system boot information has changed"

Now that we have BitLocker enabled on some of our systems, we have run into a real annoying quirck with it:


Windows BitLocker Drive Encryption Information

The system boot information has changed since BitLocker was enabled.

You must supply a BitLocker recovery password to start this system...
When setting up BitLocker, it gets us to create a text file with that password in it. We put that file onto a network share.

This screen is happening every time we boot the system.

Since we are testing things, the machine is not setup on our domain yet.

What we can tell from searching is that we need to make some settings changes to the local machine's Group Policy, or at the domain Group Policy level before enabling BitLocker on any machine attached to the SBS domain.

For a standalone system if BitLocker has already been enabled and the error is showing itself, disable BitLocker, decrypt the system drive, and reset the TPM.

Then do the following:
  1. gpedit.msc
  2. Administrative Templates
  3. Windows Components
  4. BitLocker Drive Encryption
  5. Disable by unchecking all PCR settings BUT 11
  6. Start-->CMD [Enter] (in search)
  7. GPUpdate /force
    A screenshot of the GPEdit.msc changes:

    GPEdit.msc Vista TPM PCR Settings Edited

    Reboot the system, reinitialize the TPM and run the BitLocker Drive Encryption tool to create another key and encrypt the drive.

    You can test that the settings have taken by rebooting the system after pausing the encryption process at 1%. Note that a UAC prompt will happen after clicking the Pause button on the BitLocker encryption process window.

    In our test on the stand alone system, it worked. We were no longer prompted for the BitLocker key when rebooting. We unplugged the system - did not remove the battery - and let it sit a while to make sure. Again, the system came backup without a BitLocker password prompt.

    For an SBS domain attached system where the SBS server has been RipCurled (previous blog post), one would make the settings change to the Windows Vista Group Policy Object from a Vista box logged in as the domain admin.

    Once logged into the Vista workstation and GPMC.msc is run, this is what you will see:


    SBS Vista Group Policy Object

    Note all of the extra Vista related policy settings that are accessible when managing the SBS Vista Group Policy Object from a Windows Vista machine.

    Information on the workaround was found on the TechNet Forums: BitLocker requests encryption key at every reboot.

    The BitLocker Team Blog - which hasn't been updated for a long time ... hint ... hint ...

    By the way, a very critical consideration in all this is: What will happen to the BitLocker setup when a BIOS update is done? We will definitely be watching out for the next JOE update to test that one!

    And secondly, the TPM on both the DQ965GF series and the DQ35JOE are both 1.2 compliant ... meaning that they will work with BitLocker with no issues.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Thursday, 25 October 2007

    System Builder Tip: DQ35JOE, DQ965GF and Active Management Technology

    Notes from the Intel Channel Conference Lite (ICC) in Red Deer, Alberta. To keep things simple and easy to search for there will be several posts covering different Intel product areas.

    Since the release of the Q series Executive desktop boards, Intel has really poured on about Active Management Technology (AMT) that is built into the Executive series boards.

    When we started building on the DQ965GF series board, AMT was an attractive element to the new Executive series boards.

    But, at that time there was one problem to the whole thing: When we were investigating the product and its features, it was indicated to us that we were going to need to outlay a large sum of money on third party applications to get the whole thing working. And, due to the newness of AMT, they were not kidding. So, we essentially left it alone.

    Today, things have changed ... or at least they have for us. We were give a pretty good explanation of the features and benefits of AMT:


    AMT Features & Benefits (Intel's site)

    From Out of Band management which is no power or OS to the system needed to connect and work with the system at the BIOS level, to rIDE (Redirect IDE) which can redirect a system to boot from an ISO hidden on the system's hard drive to restore it back to the image state there are some pretty neat features.

    The ability to manage a system right down to the minutiae is possible with AMT.

    The first thing one must know is that AMT on the Q series desktop boards is disabled out of the box. One must go into the BIOS and set a password to access the AMT features.

    Once that has been done, one can access some simple management features by directing a Web browser to http://192.168.22.227:16992 (IP or system name works with port 16992).

    We don't have a screen shot yet, as we don't have any of our DQ965GF/DQ35JOE AMT features activated! We will make sure to activate them on JOE (previous blog post) when we get back to the shop though.

    One other aspect of AMT that came to light today: There is a free utility from Intel that can be used to manage any Q based system with AMT activated on the LAN.

    The utility is called the System Defense Utility. It does not offer remote access from outside the LAN, but it is definitely a step in the right direction for managing a number of AMT activated systems.

    Here is a screen shot:

    Intel System Defense Utility

    So, we have the ability to get to the system via a Web browser, or the System Defense Utility independent of any OS being active or not. While these means of managing systems are excellent in and of themselves, the thing that should get us to stand up and take note is: AMT management features are available to Microsoft System Center Essentials (SCE).

    Why is this important to us? Because SCE is included with SBS 2008 Cougar! (Microsoft's SBS FAQ) and, SCE will also now be included and licensed with the new "R" code Intel Server Boards ( previous ICC blog post).

    Think about the possibilities that this integration gives us. With SCE, we should be able to funnel all of our client's system telemetry into our shop for at-a-glance management. We can charge monthly fees for this service. Or, we can augment our Platinum Level Managed Services Agreement (Karl Palachuk's excellent series on converting an I.T. business model to a Managed Services model in a Month) with these management features if we haven't already done so.

    Being that we are a small shop, we prioritize all of the info that passes by us. In this case, we will be giving our investigations into AMT a top priority. Why? Because we can augment our already comprehensive preventative maintenance services we provide our clients with the ability to deepen our proactive management of their systems.

    By the way, some laptop models are now being shipped with AMT built in. They will have "Centrino Pro" indicated on them. Keep that in mind when quoting clients that are primarily running their businesses on laptops. It would not be too difficult to justify the additional costs on the laptop with a demonstration of what AMT can do for them and for our ability to be there for them.

    Links: More to come...

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Thursday, 18 October 2007

    System Builder Tip: Meet JOE ... Intel's new Executive Series Desktop Board

    Our system builder has been testing the new DQ35JOE for over a month now. They told me that they are quite happy with the results of the tests.

    So, we will be building our corporate systems on the new Intel Desktop Board DQ35JOE from now on.

    In the mean time, we are going to build a series of Core 2 Quad Q6600s on the JOE we will obtain through distribution. The systems, around 5 or 6 to start, will be used in a training lab we are putting together in the shop here.

    Here is a side-by-side with our current corporate system mainstay, the DQ965GFEKR series:


    Left: DQ965GF - Right: DQ35JOE

    It is pretty obvious that this is not just a step up in a board revision with a relabel. We are seeing 32bit 33MHz PCI go the way of the Dodo. Kinda reminds me of the PCI replacing ISA days. For that matter, PCI 32/33 has been around for a long time in computer years.

    And, check out the very left hand bottom of JOE: There is no PS/2 connectors! :D YAY! Anyone else remember the promise made somewhere around 10 years ago? Wow! It sure took one heck of a long time for that one to pass. Same with the now absent parallel and floppy ports!

    The new JOE has dual video out. One DVI and one VGA that will now support dual monitors native to the on board video. That is a pretty kewl feature. In some cases where high powered video is not required, this will save a few bucks for our clients that do things like desktop publishing and the like.

    JOE comes with an eSATA connector - in red - that has an external mounting bracket with cable that can be mounted at the rear of the case. While eSATA is definitely a neat feature, it presents a bit of a predicament. That predicament is data protection.

    This is one place where a smaller client with no Software Assurance/Enterprise Agreements really should consider BitLocker.

    Despite all of the crying about Windows Vista Ultimate and the so called "lack of features", BitLocker is, to us, the "killer app" in Windows Vista Ultimate. In the Corporate World, all of the other stuff is fluff ... well ... except maybe for the partners or executives. ;)

    BitLocker should be an easy sell to any client requiring client data security. Think doctors, lawyers, accountants, dentists, and any other professional or trade where client/customer data needs to be protected.

    Tie BitLocker into that external USB HDD that is mirroring the internal hard drive, some training on the use and rotation of the drives, and a second drive (we use different colour enclosures) for off-site rotations, and we have have a nice little security package we can propose to our clients.

    The Intel product sites: And remember, the product life cycle may be at least two years, but that does not mean that we will not run into some sort of revision level to CPU compatibility next year!

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Tuesday, 16 October 2007

    System Builder Tip: Intel DQ965GF Series BIOS Update Released

    The Intel DQ965GF Desktop Board has a recent BIOS update released on October 11, 2007.

    The BIOS revision: CO96510J.86A.5975.2007.1010.1807

    The downloads:
    From the Release Notes:
    • October 11, 2007
    • CO96510J.86A.5975.2007.1010.1807
    • VBIOS info:
      Build Number: 1518 PC 14.27 07/06/2007 17:11:20.
    • SATA RAID info:
      Intel(R) RAID for SATA - v6.1.1.1001
    • SATA AHCI info:
      Version UPSD src 08-24-2007
    • PXE Nahum info:
      Intel(R) Boot Agent GE v1.2.50
    • ME firmware build:
      2.1.3.1031 production signed.
    Time to update that bootable Technician's Thumb Drive (previous blog post).

    We always update the BIOS on the first boot of a system or server we put together.

    This one is pretty important.

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists

    *All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.

    Thursday, 31 May 2007

    Windows Vista - Intel Matrix Storage Console

    We are now getting into the habit of configuring all of our workstations with RAID 1 mirroring.

    We have also managed to convince our clients that the small additional cost of the extra hard disk is worth it. So, most of our client desktops are also configured with RAID 1.

    We just finished configuring a Vista Ultimate system on an Intel DQ965GFEKR with two 320 GB hard disks configured as a RAID 1 array.

    Here is what we see after installing the Intel Matrix Storage Console in basic mode:


    And, a shot of the Advanced Mode:


    The Intel Matrix Storage also pops a message up just after logging into the system indicating that the hard disks are healthy. That little message can provide reassurance that our client's data is as safe as it can be. ;)

    Of course, no data storage solution is complete without backups and folder redirection for redundancy! :D

    Philip Elder
    MPECS Inc.
    Microsoft Small Business Specialists