What is vPro, is it Linux compatible?

Question

I saw that some of the Lenovo laptops have "vPro" processors, which enable special management features:

http://www.intel.com/content/www/us/en/architecture-and-technology/vpro/vpro-technology-general.html

Most of these features sound like software features, not CPU features, how exactly does this integrate? Is it compatible with Linux/Ubuntu management features? Is this the "Trusted computing" thing the free software folks were against some time ago?

Solution

Intel vPro is a collection of computer hardware technologies that enable management features such as remote access to the PC, including monitoring, maintenance, and management independent of the state of the operating system or power state of the PC, and security features.^Intel

And since its not OS dependent, it should be compatible with Linux. For more info see Intel Setup and Configuration Service 7.2: Designed for Linux

Comments

[NoBugs]

How in the world does it monitor/manage remotely regardless of the power state or OS? Wouldn't this be a security hole, for most consumers?

[NoBugs]

So theoretically, with vPro/TPM enabled the manufacturer, or anyone with leaked key could get access to all of the pc?

[Csabi Vidó]

I'm not an expert on that topic. I have never tinkered with TPM and the like myself. All I can say is: If you don't trust the manufacturers or their implementation, then you should use another encryption software or configure the software to use only software crypto routines.

[Mitch]

Intel AMT is the set of management and security features built into vPro PCs that makes it easier for a sys-admin to monitor, maintain, secure, and service PCs.

[NoBugs]

You mean you can turn the feature off in bios/uefi menu?

[NoBugs]

So is it that different from wake-on-LAN?

[Csabi Vidó]

As far as I know TPM modules in current laptops and desktops can be disabled, yes.