| Intel vPro® Eligibility ‡ |
Intel vPro® Enterprise, Intel vPro® Platform (The Intel vPro® platform is a set of hardware and technologies used to build business computing endpoints with premium performance, built-in security, modern manageability, and platform stability. The launch of 12th Gen Intel® Core™ processors introduced Intel vPro® Enterprise and Intel vPro® Essentials branding. Intel vPro® Enterprise: Commercial platform offering the full set of security, manageability, and stability features for any given Intel processor generation, including Intel® Active Management Technology/Intel vPro® Essentials: Commercial platform offering a subset of Intel vPro® Enterprise features, including Intel® Hardware Shield and Intel® Standard Manageability) |
| Intel® Hardware Shield Eligibility ‡ |
Yes (Intel® Hardware Shield delivers protections against firmware attacks for increased platform protection. As part of the Intel vPro® platform, Intel® Hardware Shield helps ensure that the operating system runs on legitimate hardware. It also provides hardware-to-software security visibility, so the operating system can enforce a more complete security policy.) |
| Intel® Threat Detection Technology (TDT) |
Yes |
| Intel® Active Management Technology (AMT) ‡ |
Yes (Intel® AMT is the manageability solution for Intel vPro® Enterprise platforms and provides remote out-of-band management for efficient proactive and reactive system maintenance over Ethernet or Wi-Fi connections and is a superset of Intel® Standard Manageability features.) |
| Intel® Standard Manageability (ISM) ‡ |
Yes (Intel® Standard Manageability is the manageability solution for Intel vPro® Essentials platforms and is a subset of Intel® AMT with out-of-band management over Ethernet and Wi-Fi, but no KVM or new life cycle management features.) |
| Intel® Remote Platform Erase (RPE) ‡ |
Yes |
| Intel® One-Click Recovery ‡ |
Yes |
| Intel® Control-Flow Enforcement Technology |
Yes (CET - Intel Control-flow Enforcement Technology (CET) helps protect against the misuse of legitimate code snippets through return-orientated programming (ROP) control-flow hijacking attacks.) |
| Intel® Total Memory Encryption - Multi Key |
Yes |
| Intel® AES New Instructions |
Yes (Intel® AES New Instructions (Intel® AES-NI) are a set of instructions that enable fast and secure data encryption and decryption. AES-NI are valuable for a wide range of cryptographic applications, for example: applications that perform bulk encryption/decryption, authentication, random number generation, and authenticated encryption.) |
| Secure Key |
Yes (Intel® Secure Key consists of a digital random number generator that creates truly random numbers to strengthen encryption algorithms.) |
| Intel® Trusted Execution Technology ‡ |
Yes (Intel® Trusted Execution Technology for safer computing is a versatile set of hardware extensions to Intel® processors and chipsets that enhance the digital office platform with security capabilities such as measured launch and protected execution. It enables an environment where applications can run within their own space, protected from all other software on the system.) |
| Execute Disable Bit ‡ |
Yes (Execute Disable Bit is a hardware-based security feature that can reduce exposure to viruses and malicious-code attacks and prevent harmful software from executing and propagating on the server or network.) |
| Intel® OS Guard |
Yes |
| Intel® Boot Guard |
Yes (Intel® Device Protection Technology with Boot Guard helps protect the system’s pre-OS environment from viruses and malicious software attacks.) |
| Mode-Based Execute Control (MBEC) |
Yes (Mode-based Execute Control can more reliably verify and enforce the integrity of kernel level code.) |
| Intel® Stable IT Platform Program (SIPP) |
Yes (The Intel® Stable IT Platform Program (Intel® SIPP) aims for zero changes to key platform components and drivers for at least 15 months or until the next generational release, reducing complexity for IT to effectively manage their computing endpoints.) |
| Intel® Virtualisation Technology with Redirect Protection (VT-rp) ‡ |
Yes |
| Intel® Virtualisation Technology (VT-x) ‡ |
Yes (Intel® Virtualisation Technology (VT-x) allows one hardware platform to function as multiple “virtual” platforms. It offers improved manageability by limiting downtime and maintaining productivity by isolating computing activities into separate partitions.) |
| Intel® Virtualisation Technology for Directed I/O (VT-d) ‡ |
Yes (Intel® Virtualisation Technology for Directed I/O (VT-d) continues from the existing support for IA-32 (VT-x) and Itanium® processor (VT-i) virtualisation adding new support for I/O-device virtualisation. Intel VT-d can help end users improve security and reliability of the systems and also improve performance of I/O devices in virtualised environments.) |
| Intel® VT-x with Extended Page Tables (EPT) ‡ |
Yes (Intel® VT-x with Extended Page Tables (EPT), also known as Second Level Address Translation (SLAT), provides acceleration for memory intensive virtualised applications. Extended Page Tables in Intel® Virtualisation Technology platforms reduces the memory and power overhead costs and increases battery life through hardware optimisation of page table management.) |
