Remote management of NUC devices

To enable remote management, including KVM, you need to configure Intel AMT (Active Management Technology).

Note: This assumes you're using NUC connected to the EdgeRouter. If your networking setup is different, you may need a different network configuration.

1. Enter Intel ME settings by pressing Ctrl+P on the boot screen.

   • The first time you need to set a password, the default one is “admin”. Password must be at least 8 characters long, contain both lowercase and uppercase characters, at least one digit and at least one non alpha-numeric character.

2. Configure network

   • Go to Network Setup > TCP/IP Settings > Wired LAN IPV4 Configuration.
   • Disable DHCP Mode and set a static IPV4 Address.
   • Return to AMT Configuration and enable Activate Network Access.
   • Exit Intel ME settings and save your changes.

Enabling Intel AMT or vPro KVM

The Intel AMT or vPro KVM needs to be enabled before use. These are enabled using the wsman command-line utility.

These instructions assume you have set the AMT_HOST variable which contains the IPv4 address you configured in the Intel ME settings, In these instructions, AMT_PASSWORD is the Intel ME password and VNC_PASSWORD is the VNC password.

Note: Password must be exactly 8 characters long, contain both lowercase and uppercase characters, at least one digit and at least one non alpha-numeric character.

1. Set the VNC password:

   wsman put http://intel.com/wbem/wscim/1/ips-schema/1/IPS_KVMRedirectionSettingData -h ${AMT_HOST} -P 16992 -u admin -p ${AMT_PASSWORD} -k RFBPassword=${VNC_PASSWORD}
   

2. Enable KVM redirection to port 5900:

   wsman put http://intel.com/wbem/wscim/1/ips-schema/1/IPS_KVMRedirectionSettingData -h ${AMT_HOST} -P 16992 -u admin -p ${AMT_PASSWORD} -k Is5900PortEnabled=true
   

3. Disable opt-in policy (do not ask user for console access):

   wsman put http://intel.com/wbem/wscim/1/ips-schema/1/IPS_KVMRedirectionSettingData -h ${AMT_HOST} -P 16992 -u admin -p ${AMT_PASSWORD} -k OptInPolicy=false
   

4. Disable session timeout:

   wsman put http://intel.com/wbem/wscim/1/ips-schema/1/IPS_KVMRedirectionSettingData -h ${AMT_HOST} -P 16992 -u admin -p ${AMT_PASSWORD} -k SessionTimeout=0
   

5. Enable KVM:

   wsman invoke -a RequestStateChange http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_KVMRedirectionSAP -h ${AMT_HOST} -P 16992 -u admin -p ${AMT_PASSWORD} -k RequestedState=2
   

Now, you can remotely access the NUC using any VNC client, for example using VNC: vncviewer ${AMT_HOST}.