Intel AMT features in Symantec Workspace Streaming

Intel AMT is a set of hardware-based remote management features to manage computers out-of-band. If you are using the Symantec Management Platform or Client Management Suite, you might be familiar with the Out of Band Solution that is available to leverage AMT capable chipsets.

Several features in Workspace Streaming v6.1 can be enhanced using Intel AMT-enabled chipsets. Note that certain AMT enablement features described below are in beta at this time (ie context aware and out-of-band license updates).This article provides an overview of these features and describes how they are enabled.
 

AMT Features

Most of the AMT features are enabled by adding AMT configuration data to the Agent Configuration file. AMT features are designed to work in conjunction with OOB Solution or another management application. For example, the Workspace Streaming agent can be configured to use the Agent Monitoring feature of AMT, but it does not provide a management tool to track the Agent using AMT. If you are using OOB solution, there are several excellent articles on Connect you can use to configure AMT.
 

Agent Presence Checking

The Streaming Agent can use the agent monitoring features of vPro to trigger notifications or other actions if the Streaming Agent becomes unresponsive. To enable this, you generate a WatchdogGUID in your AMT management application and add it to the client configuration file (more details later).
 

Out-of-band License Updates

Provisioned application and licenses can be updated immediately through AMT, without starting the client operating system. The Streaming Server has the ability to update the license information stored in the AMT cache, which simplifies changing license information (for example, extending the license or setting an expiration date). The Streaming Agent removes the application after the AMT cache is updated, enabling quick application provisioning and license reclamation.
 

Out-of-band Inventory of Streamed Applications

Application inventory is available in the AMT Cache. This lets you update inventory during off hours when the computer is turned off but still connected to the network.
 

Secure AMT Communication

Workspace Streaming can use a secure connection to communicate with AMT management tools. Your AMT management tool likely provides a method to deliver a certificate to the computer to enable this. After you have secure communication working, simply update the AMT.UseTLS setting in the agent configuration file (more details later).

The next two features are part of the Intel Mobile features in Workspace Streaming, I thought they were worth mentioning here in case you haven't used them:
 

Offline-Ready Checking (mobile)

The Streaming Agent can notify a user if an application is not yet fully cached when they disconnect from the network, enabling them to reconnect and fully cache the application. This is useful for traveling employees who need to make sure an application is available offline.
 

Context-Aware Updates (mobile)

The Streaming Agent can delay installing non-critical updates if the computer is running on battery power and the power is below a certain threshold.

Enabling AMT Features

The AMT features are enabled in the Streaming Console configuration file. Open C:\Program Files\Symantec\Endpoint Virtualization\Workspace Streaming\Server\console\conf\ config.properties in a text editor and update the following:

cSwitch=ON

On each computer, AMT data needs to be included in the Streaming Agent configuration file, appstreamcfg.txt. You can update the copy on your Streaming Server in Program Files\Symantec\Endpoint Virtualization\Workspace Streaming\Server\launchserv\webapps\launchserv\new\appstreamcfg.txt to apply AMT settings whenever the Agent is installed from the Streaming Portal. To change these settings on an individual workstation, update C:\Program Files\Symantec\Endpoint Virtualization\Workspace Streaming\Agent\bin\appstreamcfg.txt

;--- AMT ---
Amt.UserName=admin
Amt.Password=Admin`12
Amt.StorageEnterpriseName=SampleEnterprise
Amt.StorageVendorName=AppStream, Inc.
Amt.StorageAppName=Windows Client
Amt.UseTLS=1
Amt.WatchdogGUID=
;Amt.WatchdogGUID is determined by an external solution such as OOB Solution

If any of you are using AMT in your environment please let us know what you are doing in comments.