text:
Colorado drainage basins
From Wikipedia, the free encyclopedia
Jump to: navigation, search
See also: List of rivers in Colorado
The Gunnison River in the Black Canyon.
Main article: Geography of Colorado
The U.S State of Colorado includes the headwaters of several important rivers. The state is divided into two major hydrographic regions by the Continental Divide of the Americas. East of the Continental Divide, surface waters flow via the South Platte River, the North Platte River, the Republican River, the Arkansas River, the Cimarron River, the Canadian River, or the Rio Grande to the Gulf of Mexico. West of the Continental Divide, surface waters flow via the Green River, the upper Colorado River[1] (formerly the Grand River), or the San Juan River into the Colorado River and on to the Gulf of California. Colorado also has three significant endorheic basins: the San Luis Closed Basin in the San Luis Valley, and the Bear Creek Basin and the White Woman Basin spanning the Colorado-Kansas border north and south of the Arkansas River.
Contents
[hide]
1 List of major drainage basins
2 See also
3 References
4 External links
List of major drainage basins[edit]
Major Drainage Basins of the State of Colorado

Basin
Outlet
Total Area[2]
In-State Area[2]
% In-State[2]
Colorado River[1][3] Gulf of California 001703,132 km2
271,481 mi2 001100,195 km2
38,686 mi2 A06414.2%
Arkansas River[4] Mississippi River 002478,501 km2
184,750 mi2 00270,022 km2
27,036 mi2 A06314.6%
Rio Grande (Rio Bravo del Norte)[5] Gulf of Mexico 003457,275 km2
176,555 mi2 00912,070 km2
4,660 mi2 A0722.6%
Canadian River Arkansas River 004122,701 km2
47,375 mi2 073154 km2
59 mi2 A0730.1%
Green River[6] Colorado River 005115,903 km2
44,750 mi2 00527,340 km2
10,556 mi2 A05923.6%
North Platte River[7] Platte River 00680,755 km2
31,180 mi2 0185,129 km2
1,980 mi2 A0686.4%
upper Colorado River (Grand River)[1] Colorado River 00767,993 km2
26,252 mi2 00357,680 km2
22,270 mi2 A03884.8%
San Juan River[3] Colorado River 00864,560 km2
24,927 mi2 00815,175 km2
5,859 mi2 A06023.5%
South Platte River[8] Platte River 00962,738 km2
24,223 mi2 00448,948 km2
18,899 mi2 A04078.0%
Smoky Hill River Kansas River 01051,783 km2
19,994 mi2 0402,493 km2
963 mi2 A0704.8%
Cimarron River Arkansas River 01144,890 km2
17,332 mi2 0165,481 km2
2,116 mi2 A06612.2%
Yampa River Green River 01221,506 km2
8,304 mi2 00715,289 km2
5,903 mi2 A04371.1%
Gunnison River[3][9] upper Colorado River (Grand River) 01320,851 km2
8,051 mi2 00620,851 km2
8,051 mi2 A001100%
North Fork Republican River Republican River 01413,172 km2
5,086 mi2 01011,522 km2
4,449 mi2 A03787.5%
White River Green River 01512,989 km2
5,015 mi2 0129,796 km2
3,782 mi2 A04275.4%
Dolores River upper Colorado River (Grand River) 01611,998 km2
4,633 mi2 01110,619 km2
4,100 mi2 A03688.5%
Laramie River[7] North Platte River 01711,961 km2
4,618 mi2 061989 km2
382 mi2 A0678.3%
Little Snake River Yampa River 01810,629 km2
4,104 mi2 0224,412 km2
1,704 mi2 A05241.5%
Purgatoire River[10] Arkansas River 0198,923 km2
3,445 mi2 0138,601 km2
3,321 mi2 A03196.4%
Lodgepole Creek South Platte River 0208,374 km2
3,233 mi2 069496 km2
191 mi2 A0695.9%
Rio Chama Rio Grande 0218,204 km2
3,168 mi2 071238 km2
92 mi2 A0712.9%
San Luis Closed Basin[11][12] endorheic basin 0227,638 km2
2,949 mi2 0147,638 km2
2,949 mi2 A002100%
Frenchman Creek Republican River 0237,398 km2
2,856 mi2 0362,539 km2
980 mi2 A05334.3%
South Fork Republican River Republican River 0247,195 km2
2,778 mi2 0175,454 km2
2,106 mi2 A04175.8%
San Luis Creek San Luis Closed Basin 0257,000 km2
2,703 mi2 0157,000 km2
2,703 mi2 A003100%
Cache la Poudre River[13] South Platte River 0264,959 km2
1,915 mi2 0214,587 km2
1,771 mi2 A03492.5%
Bear Creek Basin endorheic basin 0274,896 km2
1,890 mi2 0372,521 km2
973 mi2 A04851.5%
Huerfano River[14] Arkansas River 0284,840 km2
1,869 mi2 0194,840 km2
1,869 mi2 A004100%
Big Sandy Creek Arkansas River 0294,825 km2
1,863 mi2 0204,825 km2
1,863 mi2 A005100%
Bear Creek Bear Creek Basin 0304,500 km2
1,737 mi2 0392,500 km2
965 mi2 A04755.6%
North Fork Cimarron River Cimarron River 0314,462 km2
1,723 mi2 0432,225 km2
859 mi2 A04949.9%
Arikaree River[15] North Fork Republican River 0324,429 km2
1,710 mi2 0234,265 km2
1,647 mi2 A03296.3%
San Miguel River Dolores River 0334,060 km2
1,567 mi2 0244,060 km2
1,567 mi2 A006100%
Stinking Water Creek Frenchman Creek 0343,862 km2
1,491 mi2 063966 km2
373 mi2 A05825.0%
Roaring Fork River[16] upper Colorado River (Grand River) 0353,766 km2
1,454 mi2 0253,766 km2
1,454 mi2 A007100%
Crow Creek South Platte River 0363,717 km2
1,435 mi2 0442,201 km2
850 mi2 A04659.2%
Horse Creek Arkansas River 0373,680 km2
1,421 mi2 0263,680 km2
1,421 mi2 A008100%
Ladder Creek Smoky Hill River 0383,645 km2
1,407 mi2 067663 km2
256 mi2 A06218.2%
Bijou Creek South Platte River 0393,612 km2
1,395 mi2 0273,612 km2
1,395 mi2 A009100%
White Woman Basin endorheic basin 0403,577 km2
1,381 mi2 065908 km2
351 mi2 A05725.4%
Rush Creek Arkansas River 0413,570 km2
1,378 mi2 0283,570 km2
1,378 mi2 A010100%
Animas River San Juan River 0423,562 km2
1,375 mi2 0302,971 km2
1,147 mi2 A03983.4%
Saguache Creek San Luis Creek 0433,482 km2
1,345 mi2 0293,482 km2
1,345 mi2 A011100%
Montezuma Creek San Juan River 0443,044 km2
1,175 mi2 062983 km2
380 mi2 A05432.3%
White Woman Creek White Woman Basin 0453,000 km2
1,158 mi2 066800 km2
309 mi2 A05626.7%
Beaver Creek South Platte River 0462,939 km2
1,135 mi2 0312,939 km2
1,135 mi2 A012100%
Uncompahgre River Gunnison River 0472,921 km2
1,128 mi2 0322,921 km2
1,128 mi2 A013100%
Tomichi Creek Gunnison River 0482,874 km2
1,109 mi2 0332,874 km2
1,109 mi2 A014100%
Apishapa Creek[14] Arkansas River 0492,798 km2
1,080 mi2 0342,798 km2
1,080 mi2 A015100%
Saint Vrain Creek[17] South Platte River 0502,572 km2
993 mi2 0352,572 km2
993 mi2 A016100%
Eagle River upper Colorado River (Grand River) 0512,515 km2
971 mi2 0382,515 km2
971 mi2 A017100%
Vermillion Creek Green River 0522,500 km2
965 mi2 0591,155 km2
446 mi2 A05146.2%
North Fork Gunnison River Gunnison River 0532,492 km2
962 mi2 0412,492 km2
962 mi2 A018100%
Fountain Creek[18] Arkansas River 0542,418 km2
933 mi2 0422,418 km2
933 mi2 A019100%
Big Thompson River[13] South Platte River 0552,149 km2
830 mi2 0452,149 km2
830 mi2 A020100%
Two Butte Creek Arkansas River 0562,107 km2
814 mi2 0462,107 km2
814 mi2 A021100%
Mancos River San Juan River 0572,099 km2
810 mi2 0471,973 km2
762 mi2 A03394.0%
Conejos River Rio Grande 0582,078 km2
802 mi2 0561,471 km2
568 mi2 A04470.8%
North Fork Smoky Hill River Smoky Hill River 0591,965 km2
759 mi2 064947 km2
366 mi2 A05048.2%
Sidney Draw South Platte River 0601,949 km2
753 mi2 070368 km2
142 mi2 A06118.9%
South Fork Beaver Creek Beaver Creek 0611,939 km2
749 mi2 068522 km2
201 mi2 A05526.9%
Sand Arroyo Creek North Fork Cimarron River 0621,938 km2
748 mi2 0571,314 km2
507 mi2 A04567.8%
Chico Creek Arkansas River 0631,934 km2
747 mi2 0481,934 km2
747 mi2 A022100%
Kiowa Creek South Platte River 0641,888 km2
729 mi2 0491,888 km2
729 mi2 A023100%
Pawnee Creek South Platte River 0651,875 km2
724 mi2 0501,875 km2
724 mi2 A024100%
McElmo Creek San Juan River 0661,842 km2
711 mi2 0531,654 km2
639 mi2 A03589.8%
Blue River[19] upper Colorado River (Grand River) 0671,770 km2
683 mi2 0511,770 km2
683 mi2 A025100%
Piedra River San Juan River 0681,770 km2
683 mi2 0521,770 km2
683 mi2 A026100%
Piceance Creek White River 0691,630 km2
629 mi2 0541,630 km2
629 mi2 A027100%
Little Beaver Creek Beaver Creek 0701,602 km2
619 mi2 072210 km2
81 mi2 A06513.1%
Clear Creek[19] South Platte River 0711,497 km2
578 mi2 0551,497 km2
578 mi2 A028100%
Taylor River[16] Gunnison River 0721,258 km2
486 mi2 0581,258 km2
486 mi2 A029100%
Boulder Creek[20] Saint Vrain Creek 0731,160 km2
448 mi2 0601,160 km2
448 mi2 A030100%
Cherry Creek South Platte River 0731,050 km2
405 mi2 0601,050 km2
405 mi2 A030100%
See also[edit]
Hydrology
Surface-water hydrology
Drainage basin
State of Colorado
Geography of Colorado
List of rivers in Colorado
References[edit]
^ Jump up to: a b c The origin and route of the Colorado River was the subject of centuries of exploration and debate. United States Geological Survey (USGS) maps of the 19th century showed the river originating at the confluence of the Green River and the Grand River in what is now Canyonlands National Park in Utah. Thus, the namesake river of the State of Colorado did not flow through that state. On 25 July 1921, House Joint Resolution 460 of the 66th United States Congress changed the name of the Grand River to the Colorado River over the objections of the USGS, which noted that the drainage basin of the Green River was 70% more extensive than that of the Grand River, although the flow of the Grand River at the confluence frequently exceeded that of the Green River.
^ Jump up to: a b c Gustafson, Daniel L. (2003-01-24). "Hydrologic Unit Project". Montana State University, Environmental Statistics Group. Retrieved 2008-02-05.
^ Jump up to: a b c The summit of Uncompahgre Peak at 14,321 feet (4365.0 m) is the highest point in the drainage basins of the Cimarron River, the Gunnison River, the former Grand River, the Colorado River, and the Gulf of California.
Jump up ^ The summit of Mount Elbert at 14,440 feet (4401.2 m) is the highest point in the drainage basins of the Arkansas River and the Mississippi River.
Jump up ^ The summit of Blanca Peak at 14,351 feet (4374 m) is the highest point in the drainage basin of the Rio Grande (Rio Bravo del Norte).
Jump up ^ The headwaters of the Green River are located in the Wind River Mountains of the State of Wyoming.
^ Jump up to: a b The summit of Clark Peak at 12,960 feet (3950 m) is the highest point in the drainage basins of the Laramie River and the North Platte River.
Jump up ^ The summit of Mount Lincoln at 14,293 feet (4356.5 m) is the highest point in the drainage basins of the South Platte River, the Platte River, and the Missouri River.
Jump up ^ The Gunnison River Basin is the most extensive river basin exclusively within the State of Colorado.
Jump up ^ The summit of Culebra Peak at 14,053 feet (4283 m) is the highest point in the drainage basin of the Purgatoire River.
Jump up ^ The San Luis Closed Basin is the most extensive endorheic basin in the State of Colorado.
Jump up ^ The summit of Crestone Peak at 14,300 feet (4359 m) is the highest point in the San Luis Closed Basin.
^ Jump up to: a b The summit of Hagues Peak at 13,573 feet (4137 m) is the highest point in the drainage basins of the Cache la Poudre River and the Big Thompson River.
^ Jump up to: a b The summit of West Spanish Peak at 13,631 feet (4155 m) is the highest point in the drainage basins of the Huerfano River and Apishapa Creek.
Jump up ^ The point at which the Arikaree River flows out of the Colorado and into Kansas is the lowest point in the State of Colorado at 3317 feet (1011 m).
^ Jump up to: a b The summit of Castle Peak at 14,279 feet (4352.2 m) is the highest point in the drainage basins of the Roaring Fork River and the Taylor River.
Jump up ^ The summit of Longs Peak at 14,259 feet (4346 m) is the highest point in the drainage basin of Saint Vrain Creek.
Jump up ^ The summit of Pikes Peak at 14,115 feet (4302.31 m) is the highest point in the drainage basin of Fountain Creek.
^ Jump up to: a b The summit of Grays Peak at 14,278 feet (4352 m) is the highest point on the Continental Divide in North America and the drainage basins of the Blue River and Clear Creek.
Jump up ^ Murphy, Sheila F. (2006). State of the watershed: Water quality of Boulder Creek, Colorado (PDF). U.S. Geological Survey Circular 1284. U.S. Department of the Interior, U.S. Geological Survey. ISBN 1-4113-0954-5. Retrieved 2008-02-05.
External links[edit]
State of Colorado website
Colorado Division of Natural Resources
Colorado Water Conservation Board
Colorado Division of Water Resources
Colorado Geological Survey
Major Rivers of Colorado
Colorado's Decision Support Systems
Colorado Watersheds
Colorado Hydrologic Units
[hide]
v
t
e
State of Colorado
Denver (capital)
Topics
Index
Coloradans
Elections
Federal lands
Geography
Government
Highways
History
Timeline
Images
Law
Military
Mountains
Museums
Public Defender
Paleontology
Rivers
Symbols
Transportation
Tourist attractions
Seal of Colorado
Society
Crime
Culture
Demographics
Economy
Education
Politics
Sports
Regions
Central Colorado
Denver-Aurora-Lakewood, CO Metropolitan Statistical Area
Eastern Plains
Front Range
Grand Valley
High Plains
High Rockies
Mineral Belt
Northern Colorado
Northwestern Colorado
Piedmont
Plateau
Roan Plateau
Roaring Fork Valley
San Luis Valley
Sangre de Cristo Mountains
South-Central Colorado
Southwest Colorado
Uinta Mountains
Uintah Basin
Western Slope
Municipalities
Akron
Alamosa
Arvada
Aspen
Aurora
Boulder
Breckenridge
Brighton
Broomfield
Cañon City
Castle Rock
Centennial
Colorado Springs
Commerce City
Cortez
Craig
Delta
Denver
Durango
Englewood
Erie
Evans
Fairplay
Federal Heights
Fort Collins
Fort Morgan
Fountain
Golden
Glenwood Springs
Grand Junction
Greeley
Greenwood Village
Gunnison
La Junta
Lafayette
Lakewood
Lamar
Leadville
Littleton
Longmont
Louisville
Loveland
Montrose
Northglenn
Parker
Platteville
Pueblo
Salida
Steamboat Springs
Sterling
Superior
Thornton
Trinidad
Vail
Westminster
Wheat Ridge
Windsor
Counties
Adams
Alamosa
Arapahoe
Archuleta
Baca
Bent
Boulder
Broomfield
Chaffee
Cheyenne
Clear Creek
Conejos
Costilla
Crowley
Custer
Delta
Denver
Dolores
Douglas
Eagle
El Paso
Elbert
Fremont
Garfield
Gilpin
Grand
Gunnison
Hinsdale
Huerfano
Jackson
Jefferson
Kiowa
Kit Carson
La Plata
Lake
Larimer
Las Animas
Lincoln
Logan
Mesa
Mineral
Moffat
Montezuma
Montrose
Morgan
Otero
Ouray
Park
Phillips
Pitkin
Prowers
Pueblo
Rio Blanco
Rio Grande
Routt
Saguache
San Juan
San Miguel
Sedgwick
Summit
Teller
Washington
Weld
Yuma
Retrieved from "https://en.wikipedia.org/w/index.php?title=Colorado_drainage_basins&oldid=797595815"
Categories:
Rivers of Colorado
Geography of Colorado
Watersheds of the United States
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Article
Talk
Variants
Views
Read
Edit
View history
More
Search
Navigation
Main page
Contents
Featured content
Current events
Random article
Donate to Wikipedia
Wikipedia store
Interaction
Help
About Wikipedia
Community portal
Recent changes
Contact page
Tools
What links here
Related changes
Upload file
Special pages
Permanent link
Page information
Wikidata item
Cite this page
Print/export
Create a book
Download as PDF
Printable version
Languages
Español
Français
Edit links
This page was last edited on 28 August 2017, at 03:18.
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization.
Privacy policy
About Wikipedia
Disclaimers
Contact Wikipedia
Developers
Cookie statement
Mobile view
Enable previews

key: html

type: local

value: div

attrs: id class

values: mw-page-base noprint

values: mw-head-base noprint

value: a

attrs: id class lang

values: firstHeading firstHeading en

values: siteSub noprint

values: jump-to-nav mw-jump

attrs: href class title

values:
/wiki/List_of_rivers_in_Colorado
mw-redirect
List of rivers in Colorado

attrs: role class

values:
note
hatnote navigation-not-searchable

value: img

attrs: alt src width height class srcset data-file-width data-file-height

attrs: href title

values: Black Canyon of the Gunnison National Park

attrs: class style

values:
/wiki/Cimarron_River_(Arkansas_River)
mw-redirect
Cimarron River (Arkansas River)

values:
/wiki/Green_River_(Colorado_River)
mw-redirect
Green River (Colorado River)

values:
/wiki/San_Juan_River_(Colorado_River)
mw-redirect
San Juan River (Colorado River)

values: Edit section: List of major drainage basins

values:
headerSort
0
columnheader button
Sort ascending

values:
/wiki/Rio_Bravo_del_Norte
mw-redirect
Rio Bravo del Norte

values:
/wiki/White_River_(Green_River)
mw-redirect
White River (Green River)

values:
/wiki/Rio_Chama_(Rio_Grande)
mw-redirect
Rio Chama (Rio Grande)

values: Stinking Water Creek (Colorado) (page does not exist)

values:
/wiki/Crow_Creek_(South_Platte_River)
mw-redirect
Crow Creek (South Platte River)

values: Montezuma Creek (Utah) (page does not exist)

values:
/wiki/Saint_Vrain_Creek
mw-redirect
Saint Vrain Creek

values:
/wiki/Fountain_Creek
mw-redirect
Fountain Creek

values: South Fork Beaver Creek (page does not exist)

values: Little Beaver Creek (Colorado) (page does not exist)

values:
/wiki/State_of_Colorado
mw-redirect
State of Colorado

values:
nofollow
http://www.esg.montana.edu/gl/huc/
external text

values:
/wiki/Wind_River_Mountains
mw-redirect
Wind River Mountains

values:
/wiki/State_of_Wyoming
mw-redirect
State of Wyoming

values:
/wiki/U.S._Geological_Survey
mw-redirect
U.S. Geological Survey

values:
/wiki/U.S._Department_of_the_Interior
mw-redirect
U.S. Department of the Interior

values: -moz-column-width: 30em; -webkit-column-width: 30em; column-width: 30em; list-style-type: decimal;

values:
nofollow
http://www.colorado.gov/
external text

values:
nofollow
http://www.cwcb.state.co.us/
external text

values:
nofollow
http://www.water.state.co.us/
external text

values:
nofollow
http://cdss.state.co.us/DNN/
external text

values: Category:Tourist attractions in Colorado

attrs: alt src width height srcset data-file-width data-file-height

values:
/wiki/File:Seal_of_Colorado.svg
image
Seal of Colorado

values:
navbox-image
5
width:1px;padding:0px 0px 0px 2px

values:
/wiki/Demographics_of_Colorado
mw-redirect
Demographics of Colorado

values:
/wiki/Education_in_Colorado
mw-redirect
Education in Colorado

values: nowraplinks collapsible autocollapse navbox-inner

values: Category:Watersheds of the United States

values:
catlinks mw-normal-catlinks
catlinks mw-normal-catlinks
interface

values: Discussion about edits from this IP address [ctrl-alt-n]

values: A list of edits made from this IP address [ctrl-alt-y]

values: You are encouraged to create an account and log in; however, it is not mandatory

values: You're encouraged to log in; however, it's not mandatory. [ctrl-alt-o]

values:
/wiki/Colorado_drainage_basins
View the content page [ctrl-alt-c]
c

values: Discussion about the content page [ctrl-alt-t]

values: p-namespaces navigation vectorTabs p-namespaces-label

values:
p-variants
navigation
vectorMenu emptyPortlet
p-variants-label

values: Past revisions of this page [ctrl-alt-h]

values: p-views navigation vectorTabs p-views-label

values:
p-cactions
navigation
vectorMenu emptyPortlet
p-cactions-label

values:
mw-wiki-logo
/wiki/Main_Page
Visit the main page

values:
/wiki/Main_Page
Visit the main page [ctrl-alt-z]
z

values: Featured content – the best of Wikipedia

values: Find background information on current events

values:
/wiki/Special:Random
Load a random article [ctrl-alt-x]
x

values: portal navigation p-navigation p-navigation-label

values: Guidance on how to use and edit Wikipedia

values: About the project, what you can do, where to find things

values: A list of recent changes in the wiki [ctrl-alt-r]

values: portal navigation p-interaction p-interaction-label

values: Cuencas hidrográficas de Colorado – Spanish

values: mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-Colorado_drainage_basins rootpage-Colorado_drainage_basins skin-vector action-view


text:
This I Promise You
From Wikipedia, the free encyclopedia
Jump to: navigation, search
"This I Promise You"
2000 single cover
Single by NSYNC
from the album No Strings Attached
B-side
"I Thought She Knew", "Yo te Voy a Amar"
Released
November 25, 2000
Format
CD single
Recorded
1999
Genre
Pop, R&B, soul
Length
4:44 (Album Version)
4:27 (Radio Version)
Label
Jive
Songwriter(s)
Richard Marx
Producer(s)
Richard Marx
NSYNC singles chronology
"I'll Never Stop"
(2000) "This I Promise You"
(2000) "Pop"
(2001)
"I'll Never Stop"
(2000) "This I Promise You"
(2000) "Pop"
(2001)
Music video
"This I Promise You" on YouTube
"This I Promise You" is a song by American boy band NSYNC. It was released on November 25, 2000 as the third single in the United States and the fourth single in Europe from their second studio album, No Strings Attached, in 2000.
The song was composed by pop singer Richard Marx, who would later record the song twice, first for the Japanese release of his album Days in Avalon similar to the NSYNC version, and again as a rock song for the European version of his Stories to Tell album. Marx would later use the Days in Avalon version of "This I Promise You" for his Now and Forever: The Ballads album as a duet with Asian singer Sabrina.
"This I Promise You" was the group's fifth top-ten single in the U.S., reaching number five on the Billboard Hot 100 chart in the autumn of 2000. In addition, the song spent 13 weeks at number one on the Billboard Adult Contemporary chart, the group's first song to do so.[1] The single was less successful internationally, reaching number 21 on the UK Singles Chart and failing to make the top 20 in Australia.
The album version of the song was also featured on the 2001 compilation album Now That's What I Call Music! 7, but the radio edit was featured on all the three compilation albums: Greatest Hits (2005), The Collection (2010), and The Essential *NSYNC (2014).
A Spanish language version of the song, titled "Yo te Voy a Amar" was recorded at the same time and released in Spanish-speaking countries such as Mexico, Colombia, Venezuela, Peru, Chile, Bolivia, Paraguay, Uruguay, Argentina, Ecuador, Guatemala, El Salvador, Honduras, Nicaragua, Costa Rica, Panama, Cuba, Dominican Republic, and Spain.
Contents
[hide]
1 Music video
2 Track listing
3 Credits and personnel
4 Charts
5 See also
6 References
7 External links
Music video[edit]
The video, directed by Dave Meyers, shows the group members clad in turtlenecks singing in the Redwood National and State Parks, with different shots of different love relationships being shown in bubbles floating around the forest. Footage of the San Francisco skyline appears at different intervals and at the key change, the video switches to the group sitting at a table of an outdoor eatery along the Embarcadero, with a little girl blowing bubbles around. The video debuted on TRL October 27, 2000. MadTV spoofed the video on December 16, 2000, with "This We Promise You", poking fun at the group's clean-cut image.
Track listing[edit]
UK
CD single
"This I Promise You" (Radio Version) – 4:27
"It's Gonna Be Me" (Maurice Joshua Radio Remix) – 4:13
"I Thought She Knew" – 3:22
Cassette
"This I Promise You" (Radio Version) – 4:27
"This I Promise You" (Hex Hector Radio Mix) – 3:57
"I Thought She Knew" – 3:22
Europe
CD1
"This I Promise You" (Album Version) – 4:43
"This I Promise You" (Hex Hector Radio Mix) – 3:57
CD2
"This I Promise You" (Album Version) – 4:43
"I Thought She Knew" – 3:22
Limited edition remix single
"This I Promise You" (Album Version) – 4:43
"This I Promise You" (Hex Hector Club Mix) – 9:10
"This I Promise You" (Hex Hector Radio Mix) – 3:57
"Yo te Voy a Amar" (Spain Only)
America
Making the Tour exclusive bonus disc
"This I Promise You" (Live Home Video Mix) – 5:10
Credits and personnel[edit]
Recording[2]
Recorded at The Treehouse, North Hollywood, CA and Westlake Audio, Los Angeles, CA
Personnel[2]
Richard Marx – songwriter, producer, arranger
David Cole – recording engineer, mixing engineer
Adam Barber – vocal recording
Cesar Ramirez – assistant engineer
Ok Hee Kim – assistant engineer
Toby Dearborn – assistant engineer
Jeffrey CJ Vanston – drum and keyboard programming
Michael Thompson – guitar
Chaz Harper – mastering
Charts[edit]
Chart (2000–01)
Peak
position
Australian Singles Chart 42
Belgian Ultratop 50 43
Canada Top Singles (RPM) 8
Dutch Top 40 80
German Singles Chart[3] 37
Italian Singles Chart[4] 56
New Zealand Singles Chart 32
Scottish Singles Chart[5] 24
Spanish Singles Chart[6] 7
Swedish Singles Chart 12
Swiss Singles Chart 40
UK Singles (Official Charts Company)[7] 21
US Billboard Hot 100[8] 5
US Adult Contemporary (Billboard)[9] 1
US Adult Top 40 (Billboard)[10] 27
US Hot Latin Songs (Billboard)[11] 34
US Latin Airplay (Billboard)[12] 30
US Latin Pop Songs (Billboard)[13] 16
US Mainstream Top 40 (Billboard)[14] 4
US Rhythmic (Billboard)[15] 20
See also[edit]
List of number-one adult contemporary singles of 2000 and 2001 (U.S.)
References[edit]
Jump up ^ Whitburn, Joel (2004). The Billboard Book of Top 40 Hits, 8th Edition (Billboard Publications)
^ Jump up to: a b This I Promise You (liner notes). NSYNC. Jive Records. 2000. 9251342.
Jump up ^ http://www.officialcharts.de/suche.asp?search=n sync&chart=no&music=no&country=de&peak=Peak&kategorie=alles&bereich=c_suche
Jump up ^ http://www.hitparadeitalia.it/indici/per_interprete/an.htm
Jump up ^ http://www.officialcharts.com/charts/scottish-singles-chart/20001126/41/
Jump up ^ Salaverri, Fernando (September 2005). Sólo éxitos: año a año, 1959–2002 (1st ed.). Spain: Fundación Autor-SGAE. ISBN 84-8048-639-2.
Jump up ^ "NSYNC: Artist Chart History". Official Charts Company. Retrieved April 26, 2017.
Jump up ^ "NSYNC – Chart history" Billboard Hot 100 for NSYNC. Retrieved April 26, 2017.
Jump up ^ "NSYNC – Chart history" Billboard Adult Contemporary for NSYNC. Retrieved April 26, 2017.
Jump up ^ "NSYNC – Chart history" Billboard Adult Pop Songs for NSYNC. Retrieved April 26, 2017.
Jump up ^ "NSYNC – Chart history" Billboard Hot Latin Songs for NSYNC. Retrieved April 26, 2017.
Jump up ^ "NSYNC – Chart history" Billboard Latin Airplay for NSYNC. Retrieved April 26, 2017.
Jump up ^ "NSYNC – Chart history" Billboard Latin Pop Songs for NSYNC. Retrieved April 26, 2017.
Jump up ^ "NSYNC – Chart history" Billboard Pop Songs for NSYNC. Retrieved April 26, 2017.
Jump up ^ "NSYNC – Chart history" Billboard Rhythmic Songs for NSYNC. Retrieved April 26, 2017.
External links[edit]
"This I Promise You" Official Music Video on YouTube
Lyrics of this song at MetroLyrics
[hide]
v
t
e
NSYNC
Lance Bass
JC Chasez
Joey Fatone
Chris Kirkpatrick
Justin Timberlake
Studio albums
NSYNC
Home for Christmas
No Strings Attached
Celebrity
Compilation albums
The Winter Album
Greatest Hits
The Collection
The Essential *NSYNC
Soundtrack albums
On the Line
Singles
"I Want You Back"
"Tearin' Up My Heart"
"Here We Go"
"For the Girl Who Has Everything"
"Together Again"
"(God Must Have Spent) A Little More Time on You"
"U Drive Me Crazy"
"Merry Christmas, Happy Holidays"
"Thinking of You (I Drive Myself Crazy)"
"Music of My Heart"
"Bye Bye Bye"
"It's Gonna Be Me"
"I'll Never Stop"
"This I Promise You"
"Pop"
"Gone"
"Girlfriend"
Tours
NSYNC in Concert
No Strings Attached Tour
PopOdyssey
Celebrity Tour
Related articles
Discography
Lou Pearlman
Johnny Wright
Jive Records
New Kids on the Blecch
On the Line
Dead 7
Retrieved from "https://en.wikipedia.org/w/index.php?title=This_I_Promise_You&oldid=793045078"
Categories:
2000s ballads
2000 singles
2000 songs
NSYNC songs
Jive Records singles
Billboard Adult Contemporary number-one singles
Pop ballads
Songs written by Richard Marx
Hidden categories:
Articles with hAudio microformats
Singlechart usages for UKsinglesbyname
Singlechart usages for Billboardhot100
Singlechart called without song
Singlechart usages for Billboardadultcontemporary
Singlechart usages for Billboardadultpopsongs
Singlechart usages for Billboardlatinsongs
Singlechart usages for Billboardlatinairplay
Singlechart usages for Billboardlatinpopsongs
Singlechart usages for Billboardpopsongs
Singlechart usages for Billboardrhythmic
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Article
Talk
Variants
Views
Read
Edit
View history
More
Search
Navigation
Main page
Contents
Featured content
Current events
Random article
Donate to Wikipedia
Wikipedia store
Interaction
Help
About Wikipedia
Community portal
Recent changes
Contact page
Tools
What links here
Related changes
Upload file
Special pages
Permanent link
Page information
Wikidata item
Cite this page
Print/export
Create a book
Download as PDF
Printable version
Languages
Español
Italiano
Svenska
Edit links
This page was last edited on 30 July 2017, at 07:59.
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization.
Privacy policy
About Wikipedia
Disclaimers
Contact Wikipedia
Developers
Cookie statement
Mobile view
Enable previews

values: mw-page-base noprint

values: mw-head-base noprint

values: firstHeading firstHeading en

values: siteSub noprint

values: jump-to-nav mw-jump

value: th

attrs: colspan class style

value: tr

attrs: href class

value: td

attrs: colspan style

value: i

values: width: 33%; text-align: center; vertical-align: top; padding: .2em .1em .2em 0;

values: width: 33%; text-align: center; vertical-align: top; padding:.2em .1em;

values: width: 33%; text-align: center; vertical-align: top; padding: .2em 0 .2em .1em;

values: background: transparent; width: 100%; min-width: 100%; border-collapse: collapse;

values: width:33%; padding:.2em .1em .2em 0; text-align: center;

values: width:33%; padding:.2em .1em; text-align: center;

values: width:33%; padding:.2em 0 .2em .1em; text-align: center;

values:
/wiki/Now_and_Forever:_The_Ballads
mw-redirect
Now and Forever: The Ballads

values: Now That's What I Call Music! 7 (U.S. Series)

values:
headerSort
0
columnheader button
Sort ascending

values:
/wiki/Ultratop_50
mw-redirect
Ultratop 50

values:
/wiki/Media_Control_Charts
mw-redirect
Media Control Charts

values:
/wiki/Scottish_Singles_Chart
mw-redirect
Scottish Singles Chart

values:
/wiki/Latin_Airplay
mw-redirect
Latin Airplay

values: List of number-one adult contemporary singles of 2000 (U.S.)

values: List of number-one adult contemporary singles of 2001 (U.S.)

values:
/wiki/Template:%27N_Sync
mw-redirect
Template:'N Sync

values:
/wiki/Template_talk:%27N_Sync
mw-redirect
Template talk:'N Sync

values:
NSYNC
fn org
font-size:114%;margin:0 4em

values:
navbox-abovebelow
2
background: #EEEEEE;

values:
row
navbox-group
width:1%;background: #EEEEEE;

values: nowraplinks vcard hlist collapsible autocollapse navbox-inner

values: Category:Billboard Adult Contemporary number-one singles

values: Category:Articles with hAudio microformats

values: Category:Singlechart usages for UKsinglesbyname

values: Category:Singlechart usages for Billboardhot100

values: Category:Singlechart called without song

values: Category:Singlechart usages for Billboardadultcontemporary

values: Category:Singlechart usages for Billboardadultpopsongs

values: Category:Singlechart usages for Billboardlatinsongs

values: Category:Singlechart usages for Billboardlatinairplay

values: Category:Singlechart usages for Billboardlatinpopsongs

values: Category:Singlechart usages for Billboardpopsongs

values: Category:Singlechart usages for Billboardrhythmic

values: Discussion about edits from this IP address [ctrl-alt-n]

values: A list of edits made from this IP address [ctrl-alt-y]

values: You are encouraged to create an account and log in; however, it is not mandatory

values: You're encouraged to log in; however, it's not mandatory. [ctrl-alt-o]

values:
/wiki/This_I_Promise_You
View the content page [ctrl-alt-c]
c

values: Discussion about the content page [ctrl-alt-t]

values: p-namespaces navigation vectorTabs p-namespaces-label

values: List of all English Wikipedia pages containing links to this page [ctrl-alt-j]

values: Recent changes in pages linked from this page [ctrl-alt-k]

values:
/wiki/Wikipedia:File_Upload_Wizard
Upload files [ctrl-alt-u]
u

values: A list of all special pages [ctrl-alt-q]

values: Permanent link to this revision of the page

values: Link to connected data repository item [ctrl-alt-g]

values: Printable version of this page [ctrl-alt-p]

values:
uls-settings-trigger
Language settings
0
button
true

values: /static/images/wikimedia-button-1.5x.png 1.5x, /static/images/wikimedia-button-2x.png 2x

values: /static/images/poweredby_mediawiki_132x47.png 1.5x, /static/images/poweredby_mediawiki_176x62.png 2x

values:
suggestions
display: none; font-size: 13px;

values: mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-This_I_Promise_You rootpage-This_I_Promise_You vector-experimental-print-styles vector-nav-directionality skin-vector action-view


text:
Intel Active Management Technology
From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
It has been suggested that duplicated content about the Management Engine be split out and merged into the article titled Management Engine, which already exists. (Discuss) (November 2017)
A part of the Intel AMT web management interface, accessible even when the computer is sleeping
Intel Active Management Technology (AMT) is hardware and firmware technology for remote out-of-band management of personal computers,[1][2][3][4][5] running on the Intel Management Engine, a separate microprocessor not exposed to the user, in order to monitor, maintain, update, upgrade, and repair them.[1] Out-of-band (OOB) or hardware-based management is different from software-based (or in-band) management and software management agents.[1][2]
Hardware-based management works at a different level from software applications, and uses a communication channel (through the TCP/IP stack) that is different from software-based communication (which is through the software stack in the operating system). Hardware-based management does not depend on the presence of an OS or locally installed management agent. Hardware-based management has been available on Intel/AMD based computers in the past, but it has largely been limited to auto-configuration using DHCP or BOOTP for dynamic IP address allocation and diskless workstations, as well as wake-on-LAN (WOL) for remotely powering on systems.[6] AMT is not intended to be used by itself; it is intended to be used with a software management application.[1] It gives a management application (and thus, the system administrator who uses it) access to the PC down the wire, in order to remotely do tasks that are difficult or sometimes impossible when working on a PC that does not have remote functionalities built into it.[1][3][7]
AMT is designed into a secondary (service) processor located on the motherboard,[8] and uses TLS-secured communication and strong encryption to provide additional security.[2] AMT is built into PCs with Intel vPro technology and is based on the Intel Management Engine (ME).[2] AMT has moved towards increasing support for DMTF Desktop and mobile Architecture for System Hardware (DASH) standards and AMT Release 5.1 and later releases are an implementation of DASH version 1.0/1.1 standards for out-of-band management.[9] AMT provides similar functionality to IPMI, although AMT is designed for client computing systems as compared with the typically server-based IPMI.
Currently, AMT is available in desktops, servers, ultrabooks, tablets, and laptops with Intel Core vPro processor family, including Intel Core i5, i7, and Intel Xeon processor E3-1200 product family.[1][10][11]
Intel confirmed a Remote Elevation of Privilege bug (CVE-2017-5689, SA-00075) in its Management Technology on May 1, 2017.[12] Every Intel platform with either Intel Standard Manageability, Active Management Technology, or Small Business Technology, from Nehalem in 2008 to Kaby Lake in 2017 has a remotely exploitable security hole in the ME.[13][14] Some manufacturers, like Purism[15] and System76[16] are already selling hardware with Intel Management Engine disabled to prevent the remote exploit. Additional major security flaws in the ME affecting a very large number of computers incorporating Management Engine, Trusted Execution Engine, and Server Platform Services firmware, from Skylake in 2015 to Coffee Lake in 2017, were confirmed by Intel on November 20, 2017 (SA-00086).
Contents
1 Non-free service access
2 Features
3 History
4 Applications
5 Provisioning and integration
6 Communication
7 Design
7.1 Hardware
7.2 Firmware
8 Security
8.1 Networking
8.2 Technology
8.3 Known vulnerabilities and exploits
8.3.1 Ring −3 rootkit
8.3.2 Zero-touch provisioning
8.3.3 Silent Bob is Silent
8.3.4 PLATINUM
8.3.5 SA-00086
9 Avoidance and mitigation
10 See also
11 References
12 External links
Non-free service access[edit]
Although iAMT may be included for free in devices sold to the public and to small businesses, the full capabilities of iAMT, including encrypted remote access via a public key certificate and automatic remote device provisioning of unconfigured iAMT clients, are not accessible for free to the general public or to the direct owners of iAMT equipped devices. iAMT cannot be fully utilized to its maximum potential without purchasing additional software or management services from Intel or another 3rd party independent software vendor (ISV) or value added reseller (VAR).
Intel itself provides a developer's toolkit software package which allows basic access to iAMT, but is not intended to be normally used to access the technology.[17] Only basic modes of access are supported, without full access to the encrypted communications of the complete purchased management system.[18]
Features[edit]
Intel AMT includes hardware-based remote management, security, power management, and remote configuration features that enable independent remote access to AMT-enabled PCs.[1][7][19] Intel AMT is security and management technology that is built into PCs with Intel vPro technology.[1][6]
Intel AMT uses a hardware-based out-of-band (OOB) communication channel[1] that operates regardless of the presence of a working operating system. The communication channel is independent of the PC's power state, the presence of a management agent, and the state of many hardware components such as hard disk drives and memory.
Most AMT features are available OOB, regardless of PC power state.[1] Other features require the PC to be powered up (such as console redirection via serial over LAN (SOL), agent presence checking, and network traffic filtering).[1] Intel AMT has remote power-up capability.
Hardware-based features can be combined with scripting to automate maintenance and service.[1]
Hardware-based AMT features on laptop and desktop PCs include:
Encrypted, remote communication channel for network traffic between the IT console and Intel AMT.[1][2]
Ability for a wired PC (physically connected to the network) outside the company's firewall on an open LAN to establish a secure communication tunnel (via AMT) back to the IT console.[1][2] Examples of an open LAN include a wired laptop at home or at an SMB site that does not have a proxy server.
Remote power up / power down / power cycle through encrypted WOL.[1][2]
Remote boot, via integrated device electronics redirect (IDE-R).[1][2]
Console redirection, via serial over LAN (SOL).[1]
Keyboard, video, mouse (KVM) over network.
Hardware-based filters for monitoring packet headers in inbound and outbound network traffic for known threats (based on programmable timers), and for monitoring known / unknown threats based on time-based heuristics. Laptops and desktop PCs have filters to monitor packet headers. Desktop PCs have packet-header filters and time-based filters.[1][2][20]
Isolation circuitry (previously and unofficially called "circuit breaker" by Intel) to port-block, rate-limit, or fully isolate a PC that might be compromised or infected.[1][2][20]
Agent presence checking, via hardware-based, policy-based programmable timers. A "miss" generates an event; and this can also generate an alert.[1][2][20]
OOB alerting.[1][2]
Persistent event log, stored in protected memory (not on the hard drive).[1][2]
Access (preboot) the PC's universal unique identifier (UUID).[1][2]
Access (preboot) hardware asset information, such as a component's manufacturer and model, which is updated every time the system goes through power-on self-test (POST).[1][2]
Access (preboot) to third-party data store (TPDS), a protected memory area that software vendors can use, in which to version information, .DAT files, and other information.[1][2]
Remote configuration options, including certificate-based zero-touch remote configuration, USB key configuration (light-touch), and manual configuration.[1][2][21]
Protected Audio/Video Pathway for playback protection of DRM-protected media.
Laptops with AMT also include wireless technologies:
Support for IEEE 802.11 a/g/n wireless protocols[1][10][22][23]
Cisco-compatible extensions for Voice over WLAN[1][10][22][23]
History[edit]
Main article: Intel AMT versions
Software updates provide upgrades to the next minor version of Intel AMT. New major releases of Intel AMT are built into a new chipset, and are updated through new hardware.[2]
Applications[edit]
Almost all AMT features are available even if the PC is in a powered-off state but with its power cord attached, if the operating system has crashed, if the software agent is missing, or if hardware (such as a hard drive or memory) has failed.[1][2] The console-redirection feature (SOL), agent presence checking, and network traffic filters are available after the PC is powered up.[1][2]
Intel AMT supports these management tasks:
Remotely power up, power down, power cycle, and power reset the computer.[1]
Remote boot the PC by remotely redirecting the PC's boot process, causing it to boot from a different image, such as a network share, bootable CD-ROM or DVD, remediation drive, or other boot device.[1][7] This feature supports remote booting a PC that has a corrupted or missing OS.
Remotely redirect the system's I/O via console redirection through serial over LAN (SOL).[1] This feature supports remote troubleshooting, remote repair, software upgrades, and similar processes.
Access and change BIOS settings remotely.[1] This feature is available even if PC power is off, the OS is down, or hardware has failed. This feature is designed to allow remote updates and corrections of configuration settings. This feature supports full BIOS updates, not just changes to specific settings.
Detect suspicious network traffic.[1][20] In laptop and desktop PCs, this feature allows a sys-admin to define the events that might indicate an inbound or outbound threat in a network packet header. In desktop PCs, this feature also supports detection of known and/or unknown threats (including slow- and fast-moving computer worms) in network traffic via time-based, heuristics-based filters. Network traffic is checked before it reaches the OS, so it is also checked before the OS and software applications load, and after they shut down (a traditionally vulnerable period for PCs[citation needed]).
Block or rate-limit network traffic to and from systems suspected of being infected or compromised by computer viruses, computer worms, or other threats.[1][20] This feature uses Intel AMT hardware-based isolation circuitry that can be triggered manually (remotely, by the sys-admin) or automatically, based on IT policy (a specific event).
Manage hardware packet filters in the on-board network adapter.[1][20]
Automatically send OOB communication to the IT console when a critical software agent misses its assigned check in with the programmable, policy-based hardware-based timer.[1][20] A "miss" indicates a potential problem. This feature can be combined with OOB alerting so that the IT console is notified only when a potential problem occurs (helps keep the network from being flooded by unnecessary "positive" event notifications).
Receive Platform Event Trap (PET) events out-of-band from the AMT subsystem (for example, events indicating that the OS is hung or crashed, or that a password attack has been attempted).[1] An alert can be issued on an event (such as falling out of compliance, in combination with agent presence checking) or on a threshold (such as reaching a particular fan speed).
Access a persistent event log, stored in protected memory.[1] The event log is available OOB, even if the OS is down or the hardware has already failed.
Discover an AMT system independently of the PC's power state or OS state.[1] Discovery (preboot access to the UUID) is available if the system is powered down, its OS is compromised or down, hardware (such as a hard drive or memory) has failed, or management agents are missing.
Perform a software inventory or access information about software on the PC.[1] This feature allows a third-party software vendor to store software asset or version information for local applications in the Intel AMT protected memory. (This is the protected third party data store, which is different from the protected AMT memory for hardware component information and other system information). The third-party data store can be accessed OOB by the sys-admin. For example, an antivirus program could store version information in the protected memory that is available for third-party data. A computer script could use this feature to identify PCs that need to be updated.
Perform a hardware inventory by uploading the remote PC's hardware asset list (platform, baseboard management controller, BIOS, processor, memory, disks, portable batteries, field replaceable units, and other information).[1] Hardware asset information is updated every time the system runs through power-on self-test (POST).
From major version 6, Intel AMT embeds a proprietary VNC server, for out-of-band access using dedicated VNC-compatible viewer technology, and have full KVM (keyboard, video, mouse) capability throughout the power cycle – including uninterrupted control of the desktop when an operating system loads. Clients such as VNC Viewer Plus from RealVNC also provide additional functionality that might make it easier to perform (and watch) certain Intel AMT operations, such as powering the computer off and on, configuring the BIOS, and mounting a remote image (IDER).
Provisioning and integration[edit]
AMT supports certificate-based or PSK-based remote provisioning (full remote deployment), USB key-based provisioning ("one-touch" provisioning), manual provisioning[1] and provisioning using an agent on the local host ("Host Based Provisioning"). An OEM can also pre-provision AMT.[21]
The current version of AMT supports remote deployment on both laptop and desktop PCs. (Remote deployment was one of the key features missing from earlier versions of AMT and which delayed acceptance of AMT in the market.)[7] Remote deployment, until recently, was only possible within a corporate network.[24] Remote deployment lets a sys-admin deploy PCs without "touching" the systems physically.[1] It also allows a sys-admin to delay deployments and put PCs into use for a period of time before making AMT features available to the IT console.[25] As delivery and deployment models evolve, AMT can now be deployed over the Internet, using both "Zero-Touch" and Host-Based methods.[26]
PCs can be sold with AMT enabled or disabled. The OEM determines whether to ship AMT with the capabilities ready for setup (enabled) or disabled. The setup and configuration process may vary depending on the OEM build.[21]
AMT includes a Privacy Icon application, called IMSS,[27] that notifies the system's user if AMT is enabled. It is up to the OEM to decide whether they want to display the icon or not.
AMT supports different methods for disabling the management and security technology, as well as different methods for reenabling the technology.[1][25][28][29]
AMT can be partially unprovisioned using the Configuration Settings, or fully unprovisioned by erasing all configuration settings, security credentials, and operational and networking settings.[30] A partial unprovisioning leaves the PC in the setup state. In this state, the PC can self-initiate its automated, remote configuration process. A full unprovisioning erases the configuration profile as well as the security credentials and operational / networking settings required to communicate with the Intel Management Engine. A full unprovisioning returns Intel AMT to its factory default state.
Once AMT is disabled, in order to enable AMT again, an authorized sys-admin can reestablish the security credentials required to perform remote configuration by either:
Using the remote configuration process (full automated, remote config via certificates and keys).[1]
Physically accessing the PC to restore security credentials, either by USB key or by entering the credentials and MEBx parameters manually.[1]
There is a way to totally reset AMT and return in to factory defaults. This can be done in two ways:
Setting the appropriate value in the BIOS.
Clearing the CMOS memory and / or NVRAM.
Setup and integration of AMT is supported by a setup and configuration service (for automated setup), an AMT Webserver tool (included with Intel AMT), and AMT Commander, an unsupported and free, proprietary application available from the Intel website.
Communication[edit]
All access to the Intel AMT features is through the Intel Management Engine in the PC's hardware and firmware.[1] AMT communication depends on the state of the Management Engine, not the state of the PC's OS.
As part of the Intel Management Engine, the AMT OOB communication channel is based on the TCP/IP firmware stack designed into system hardware.[1] Because it is based on the TCP/IP stack, remote communication with AMT occurs via the network data path before communication is passed to the OS.
Intel AMT supports wired and wireless networks.[1][10][22][31] For wireless notebooks on battery power, OOB communication is available when the system is awake and connected to the corporate network, even if the OS is down. OOB communication is also available for wireless or wired notebooks connected to the corporate network over a host OS-based virtual private network (VPN) when notebooks are awake and working properly.
AMT version 4.0 and higher can establish a secure communication tunnel between a wired PC and an IT console outside the corporate firewall.[1][32] In this scheme, a management presence server (Intel calls this a "vPro-enabled gateway") authenticates the PC, opens a secure TLS tunnel between the IT console and the PC, and mediates communication.[1][33] The scheme is intended to help the user or PC itself request maintenance or service when at satellite offices or similar places where there is no on-site proxy server or management appliance.
Technology that secures communications outside a corporate firewall is relatively new. It also requires that an infrastructure be in place, including support from IT consoles and firewalls.
An AMT PC stores system configuration information in protected memory. For PCs version 4.0 and higher, this information can include the name(s) of appropriate "whitelist" management servers for the company. When a user tries to initiate a remote session between the wired PC and a company server from an open LAN, AMT sends the stored information to a management presence server (MPS) in the "demilitarized zone" ("DMZ") that exists between the corporate firewall and client (the user PC's) firewalls. The MPS uses that information to help authenticate the PC. The MPS then mediates communication between the laptop and the company's management servers.[1]
Because communication is authenticated, a secure communication tunnel can then be opened using TLS encryption. Once secure communications are established between the IT console and Intel AMT on the user's PC, a sys-admin can use the typical AMT features to remotely diagnose, repair, maintain, or update the PC.[1]
Design[edit]
Hardware[edit]
Main article: Intel Management Engine
The Management Engine (ME) is an isolated and protected coprocessor, embedded as a non-optional[34] part in all current (as of 2015[update]) Intel chipsets.[35]
Starting with ME 11, it is based on the Intel Quark x86-based 32-bit CPU and runs the MINIX 3 operating system.[36] The ME state is stored in a partition of the SPI flash, using the Embedded Flash File System (EFFS).[37] Previous versions were based on an ARC core, with the Management Engine running the ThreadX RTOS from Express Logic. Versions 1.x to 5.x of the ME used the ARCTangent-A4 (32-bit only instructions) whereas versions 6.x to 8.x used the newer ARCompact (mixed 32- and 16-bit instruction set architecture). Starting with ME 7.1, the ARC processor could also execute signed Java applets.
The ME has its own MAC and IP address for the out-of-band interface, with direct access to the Ethernet controller; one portion of the Ethernet traffic is diverted to the ME even before reaching the host's operating system, for what support exists in various Ethernet controllers, exported and made configurable via Management Component Transport Protocol (MCTP).[38][39] The ME also communicates with the host via PCI interface.[37] Under Linux, communication between the host and the ME is done via /dev/mei.[35]
Until the release of Nehalem processors, the ME was usually embedded into the motherboard's northbridge, following the Memory Controller Hub (MCH) layout.[40] With the newer Intel architectures (Intel 5 Series onwards), ME is included into the Platform Controller Hub (PCH).[41][42]
Firmware[edit]
Management Engine (ME) - mainstream chipsets
Server Platform Services (SPS) - server
Trusted Execution Engine (TXE) - tablet/mobile/low power
Security[edit]
Because AMT allows access to the PC below the OS level, security for the AMT features is a key concern.
Security for communications between Intel AMT and the provisioning service and/or management console can be established in different ways depending on the network environment. Security can be established via certificates and keys (TLS public key infrastructure, or TLS-PKI), pre-shared keys (TLS-PSK), or administrator password.[1][2]
Security technologies that protect access to the AMT features are built into the hardware and firmware. As with other hardware-based features of AMT, the security technologies are active even if the PC is powered off, the OS is crashed, software agents are missing, or hardware (such as a hard drive or memory) has failed.[1][2][43]
Because the software that implements AMT exists outside of the operating system, it is not kept up-to-date by the operating system's normal update mechanism. Security defects in the AMT software can therefore be particularly severe, as they will remain long after they have been discovered and become known to potential attackers.
On May 15, 2017, Intel announced a critical vulnerability in AMT. According to the update "The vulnerability could enable a network attacker to remotely gain access to business PCs or devices that use these technologies".[44] Intel announced partial availability of a firmware update to patch the vulnerability for some of the affected devices.
Networking[edit]
While some protocols for in-band remote management use a secured network communication channel (for example Secure Shell), some other protocols are not secured. Thus some businesses have had to choose between having a secure network or allowing IT to use remote management applications without secure communications to maintain and service PCs.[1]
Modern security technologies and hardware designs allow remote management even in more secure environments. For example, Intel AMT supports IEEE 802.1x, Preboot Execution Environment (PXE), Cisco SDN, and Microsoft NAP.[1]
All AMT features are available in a secure network environment. With Intel AMT in the secure network environment:
The network can verify the security posture of an AMT-enabled PC and authenticate the PC before the OS loads and before the PC is allowed access to the network.
PXE boot can be used while maintaining network security. In other words, an IT administrator can use an existing PXE infrastructure in an IEEE 802.1x, Cisco SDN, or Microsoft NAP network.
Intel AMT can embed network security credentials in the hardware, via the Intel AMT Embedded Trust Agent and an AMT posture plug-in.[1][2] The plug-in collects security posture information, such as firmware configuration and security parameters from third-party software (such as antivirus software and antispyware), BIOS, and protected memory. The plug-in and trust agent can store the security profile(s) in AMT's protected, nonvolatile memory, which is not on the hard disk drive.
Because AMT has an out-of-band communication channel, AMT can present the PC's security posture to the network even if the PC's OS or security software is compromised. Since AMT presents the posture out-of-band, the network can also authenticate the PC out-of-band, before the OS or applications load and before they try to access the network. If the security posture is not correct, a system administrator can push an update OOB (via Intel AMT) or reinstall critical security software before letting the PC access the network.
Support for different security postures depends on the AMT release:
Support for IEEE 802.1x and Cisco SDN requires AMT version 2.6 or higher for laptops, and AMT version 3.0 or higher for desktop PCs.[1][45][46]
Support for Microsoft NAP requires AMT version 4.0 or higher.[1]
Support for PXE boot with full network security requires AMT version 3.2 or higher for desktop PCs.[1]
Technology[edit]
AMT includes several security schemes, technologies, and methodologies to secure access to the AMT features during deployment and during remote management.[1][2][43] AMT security technologies and methodologies include:
Transport Layer Security, including pre-shared key TLS (TLS-PSK)
HTTP authentication
Single sign-on to Intel AMT with Microsoft Windows domain authentication, based on Microsoft Active Directory and Kerberos
Digitally signed firmware
Pseudo-random number generator (PRNG) which generates session keys
Protected memory (not on the hard disk drive) for critical system data, such as the UUID, hardware asset information, and BIOS configuration settings
Access control lists (ACL)
As with other aspects of Intel AMT, the security technologies and methodologies are built into the chipset.
Known vulnerabilities and exploits[edit]
See also: Intel Management Engine § Security vulnerabilities
Ring −3 rootkit[edit]
A ring −3 rootkit was demonstrated by Invisible Things Lab for the Q35 chipset; it does not work for the later Q45 chipset, as Intel implemented additional protections.[47] The exploit worked by remapping the normally protected memory region (top 16 MB of RAM) reserved for the ME. The ME rootkit could be installed regardless of whether the AMT is present or enabled on the system, as the chipset always contains the ARC ME coprocessor. (The "−3" designation was chosen because the ME coprocessor works even when the system is in the S3 state, thus it was considered a layer below the System Management Mode rootkits.[40]) For the vulnerable Q35 chipset, a keystroke logger ME-based rootkit was demonstrated by Patrick Stewin.[48][49]
Zero-touch provisioning[edit]
Another security evaluation by Vassilios Ververis showed serious weaknesses in the GM45 chipset implementation. In particular, it criticized AMT for transmitting unencrypted passwords in the SMB provisioning mode when the IDE redirection and Serial over LAN features are used. It also found that the "zero touch" provisioning mode (ZTC) is still enabled even when the AMT appears to be disabled in BIOS. For about 60 euros, Ververis purchased from Go Daddy a certificate that is accepted by the ME firmware and allows remote "zero touch" provisioning of (possibly unsuspecting) machines, which broadcast their HELLO packets to would-be configuration servers.[50]
Silent Bob is Silent[edit]
In May 2017, Intel confirmed that many computers with AMT have had an unpatched critical privilege-escalation vulnerability (CVE-2017-5689).[14][51][12][52][53] The vulnerability, which was nicknamed "Silent Bob is Silent" by the researchers who had reported it to Intel,[54] affects numerous laptops, desktops and servers sold by Dell, Fujitsu, Hewlett-Packard (later Hewlett Packard Enterprise and HP Inc.), Intel, Lenovo, and possibly others.[54][55][56][57][58][59][60] Those researchers claimed that the bug affects systems made in 2010 or later.[61] Other reports claimed that the bug also affects systems made as long ago as 2008.[62][14] The vulnerability was described as giving remote attackers:
full control of affected machines, including the ability to read and modify everything. It can be used to install persistent malware (possibly in firmware), and read and modify any data.
—  Tatu Ylönen, ssh.com[54]
The remote user authorization process included a programmer error: it compared the user-given authorization token hash (user_response) to the true value of the hash (computed_response) using this code:
strncmp(computed_response, user_response, response_length)

The vulnerability was that response_length was the length of the user-given token and not of the true token.
Since the third argument for strncmp is the length of the two strings to be compared, if it is less than the length of computed_response, only a part of the string will be tested for equality. Specifically, if user_response is the empty string (with length 0), this "comparison" will always return True, and thus validate the user. This allowed any person to simply log into the admin account on the devices by editing their sent HTTP packet to use the empty string as the response field's value.
PLATINUM[edit]
In June 2017, the PLATINUM cybercrime group became notable for exploiting the serial over LAN (SOL) capabilities of AMT to perform data exfiltration of stolen documents.[63][64][65][66][67][68][69][70]
SA-00086[edit]
In November 2017 serious flaws were detected in the Management Engine (ME) firmware by security firm Positive Technologies, who claimed to have developed a working exploit of this system for someone having physical access to a USB port.[71] On November 20, 2017 Intel confirmed that a number of serious flaws had been found in the Management Engine, Trusted Execution Engine, Server Platform Services and released a "critical firmware update".[72][73]
Avoidance and mitigation[edit]
PCs with AMT typically provide an option in the BIOS menu to switch off AMT, though OEMs implement BIOS features differently,[74] and therefore the BIOS is not a reliable method to switch off AMT. Intel-based PCs that shipped without AMT are supposed not to be able to have AMT later installed. However, as long as the PC's hardware is potentially capable of running the AMT, it is unclear how effective these protections are.[75][76][77] Presently, there are mitigation guides[78] and tools[79] to disable AMT on Windows, but Linux has only received a tool to check whether AMT is enabled and provisioned on Linux systems.[80] The only way to actually fix this vulnerability is to install a firmware update. Intel has made a list of updates available.[81] Unlike for AMT, there is generally no official, documented way to disable the Management Engine (ME); it is always on, unless it is not enabled at all by the OEM.[82][83]
In 2015, a small number of competing vendors began to offer Intel-based PCs designed or modified specifically to address potential AMT vulnerabilities and related concerns.[84][85][86][87][88][89][90]
See also[edit]
Computing portal
Backdoor (computing)
Host Embedded Controller Interface
HP Integrated Lights-Out
Intel CIRA
Intel Core 2
Internet kill switch
I/O Controller Hub
Lights out management
Southbridge (computing)
System Service Processor
Intel AMT versions
Intel Management Engine
Intel vPro
References[edit]
^ Jump up to: a b c d e f g h i j k l m n o p q r s t u v w x y z aa ab ac ad ae af ag ah ai aj ak al am an ao ap aq ar as at au av aw ax ay az ba bb bc bd be bf bg bh bi bj bk bl "Intel Centrino 2 with vPro Technology and Intel Core2 Processor with vPro Technology" (PDF). Intel. 2008. Archived from the original (PDF) on December 6, 2008. Retrieved August 7, 2008.
^ Jump up to: a b c d e f g h i j k l m n o p q r s t u v w x "Architecture Guide: Intel Active Management Technology". Intel. June 26, 2008. Archived from the original on June 7, 2012. Retrieved August 12, 2008.
^ Jump up to: a b "Remote Pc Management with Intel's vPro". Tom's Hardware Guide. Retrieved November 21, 2007.
Jump up ^ "Intel vPro Chipset Lures MSPs, System Builders". ChannelWeb. Retrieved August 1, 2007.
Jump up ^ "Intel Mostly Launches Centrino 2 Notebook Platform". ChannelWeb. Retrieved July 1, 2008.
^ Jump up to: a b "A new dawn for remote management? A first glimpse at Intel's vPro platform". ars technica. Retrieved November 7, 2007.
^ Jump up to: a b c d "Revisiting vPro for Corporate Purchases". Gartner. Retrieved August 7, 2008.
Jump up ^ "Answers to Frequently Asked Questions about libreboot". libreboot.org. Retrieved September 25, 2015.
Jump up ^ "Archived copy". Archived from the original on April 14, 2012. Retrieved April 30, 2012. CS1 maint: Archived copy as title (link)
^ Jump up to: a b c d "Intel Centrino 2 with vPro Technology" (PDF). Intel. Archived from the original (PDF) on March 15, 2008. Retrieved July 15, 2008.
Jump up ^ "Intel MSP". Msp.intel.com. Retrieved May 25, 2016.
^ Jump up to: a b "Intel® Product Security Center". Security-center.intel.com. Retrieved May 7, 2017.
Jump up ^ Charlie Demerjian (May 1, 2017). "Remote security exploit in all 2008+ Intel platforms". SemiAccurate. Retrieved May 7, 2017.
^ Jump up to: a b c "Red alert! Intel patches remote execution hole that's been hidden in chips since 2010". Theregister.co.uk. Retrieved May 7, 2017.
Jump up ^ HardOCP: Purism Is Offering Laptops with Intel's Management Engine Disabled
Jump up ^ System76 to disable Intel Management Engine on its notebooks
Jump up ^ Garrison, Justin (March 28, 2011). "How to Remotely Control Your PC (Even When it Crashes)". Howtogeek.com. Retrieved May 7, 2017.
Jump up ^ "Open Manageability Developer Tool Kit | Intel® Software". Software.intel.com. Retrieved May 7, 2017.
Jump up ^ "Intel vPro Technology". Intel. Retrieved July 14, 2008.
^ Jump up to: a b c d e f g "Intel Active Management Technology System Defense and Agent Presence Overview" (PDF). Intel. February 2007. Retrieved August 16, 2008.
^ Jump up to: a b c "Intel Centrino 2 with vPro Technology". Intel. Archived from the original on March 15, 2008. Retrieved June 30, 2008.
^ Jump up to: a b c "New Intel-Based Laptops Advance All Facets of Notebook PCs". Intel. Archived from the original on July 17, 2008. Retrieved July 15, 2008.
^ Jump up to: a b "Understanding Intel AMT over wired vs. wireless (video)". Intel. Archived from the original on March 26, 2008. Retrieved August 14, 2008.
Jump up ^ "Intel® vPro™ Technology". Intel.
^ Jump up to: a b "Part 3: Post Deployment of Intel vPro in an Altiris Environment: Enabling and Configuring Delayed Provisioning". Intel (forum). Retrieved September 12, 2008.
Jump up ^ "Archived copy" (PDF). Archived from the original (PDF) on January 3, 2014. Retrieved July 20, 2013. CS1 maint: Archived copy as title (link)
Jump up ^ "Archived copy". Archived from the original on February 20, 2011. Retrieved December 26, 2010. CS1 maint: Archived copy as title (link)
Jump up ^ "Intel vPro Provisioning" (PDF). HP (Hewlett Packard). Retrieved June 2, 2008.
Jump up ^ "vPro Setup and Configuration for the dc7700 Business PC with Intel vPro Technology" (PDF). HP (Hewlett Packard). Retrieved June 2, 2008. [permanent dead link]
Jump up ^ "Part 4: Post Deployment of Intel vPro in an Altiris Environment Intel: Partial UnProvDefault". Intel (forum). Retrieved September 12, 2008.
Jump up ^ "Technical Considerations for Intel AMT in a Wireless Environment". Intel. September 27, 2007. Retrieved August 16, 2008.
Jump up ^ "Intel Active Management Technology Setup and Configuration Service, Version 5.0" (PDF). Intel. Retrieved October 13, 2018.
Jump up ^ "Intel AMT - Fast Call for Help". Intel. August 15, 2008. Retrieved August 17, 2008. [permanent dead link](Intel developer's blog)
Jump up ^ "Archived copy". Archived from the original on January 3, 2016. Retrieved January 16, 2016. CS1 maint: Archived copy as title (link)
^ Jump up to: a b "Archived copy". Archived from the original on November 1, 2014. Retrieved February 25, 2014. CS1 maint: Archived copy as title (link)
Jump up ^ "Positive Technologies Blog: Disabling Intel ME 11 via undocumented mode". Retrieved August 30, 2017.
^ Jump up to: a b Igor Skochinsky (Hex-Rays) Rootkit in your laptop, Ruxcon Breakpoint 2012
Jump up ^ "Intel Ethernet Controller I210 Datasheet" (PDF). Intel. 2013. pp. 1, 15, 52, 621&ndash, 776. Retrieved November 9, 2013.
Jump up ^ "Intel Ethernet Controller X540 Product Brief" (PDF). Intel. 2012. Retrieved February 26, 2014.
^ Jump up to: a b Joanna Rutkowska. "A Quest to the Core" (PDF). Invisiblethingslab.com. Retrieved May 25, 2016.
Jump up ^ "Archived copy" (PDF). Archived from the original (PDF) on February 11, 2014. Retrieved February 26, 2014. CS1 maint: Archived copy as title (link)
Jump up ^ "Platforms II" (PDF). Users.nik.uni-obuda.hu. Retrieved May 25, 2016.
^ Jump up to: a b "New Intel vPro Processor Technology Fortifies Security for Business PCs (news release)". Intel. August 27, 2007. Archived from the original on September 12, 2007. Retrieved August 7, 2007.
Jump up ^ "Intel® AMT Critical Firmware Vulnerability". Intel. Retrieved June 10, 2017.
Jump up ^ "Intel Software Network, engineer / developers forum". Intel. Retrieved August 9, 2008. [permanent dead link]
Jump up ^ "Cisco Security Solutions with Intel Centrino Pro and Intel vPro Processor Technology" (PDF). Intel. 2007.
Jump up ^ "Invisible Things Lab to present two new technical presentations disclosing system-level vulnerabilities affecting modern PC hardware at its core" (PDF). Invisiblethingslab.com. Retrieved May 25, 2016.
Jump up ^ "Berlin Institute of Technology : FG Security in telecommunications : Evaluating "Ring-3" Rootkits" (PDF). Stewin.org. Retrieved May 25, 2016.
Jump up ^ "Persistent, Stealthy Remote-controlled Dedicated Hardware Malware" (PDF). Stewin.org. Retrieved May 25, 2016.
Jump up ^ "Security Evaluation of Intel's Active Management Technology" (PDF). Web.it.kth.se. Retrieved May 25, 2016.
Jump up ^ "CVE - CVE-2017-5689". Cve.mitre.org. Retrieved May 7, 2017.
Jump up ^ "Intel Hidden Management Engine - x86 Security Risk?". Darknet. June 16, 2016. Retrieved May 7, 2017.
Jump up ^ Garrett, Matthew (May 1, 2017). "Intel's remote AMT vulnerablity". mjg59.dreamwidth.org. Retrieved May 7, 2017.
^ Jump up to: a b c "2017-05-05 ALERT! Intel AMT EXPLOIT OUT! IT'S BAD! DISABLE AMT NOW!". Ssh.com\Accessdate=2017-05-07.
Jump up ^ Dan Goodin (May 6, 2017). "The hijacking flaw that lurked in Intel chips is worse than anyone thought". Ars Technica. Retrieved May 8, 2017.
Jump up ^ "General: BIOS updates due to Intel AMT IME vulnerability - General Hardware - Laptop - Dell Community". En.community.dell.com. Retrieved May 7, 2017.
Jump up ^ "Advisory note: Intel Firmware vulnerability – Fujitsu Technical Support pages from Fujitsu Fujitsu Continental Europe, Middle East, Africa & India". Support.ts.fujitsu.com. May 1, 2017. Retrieved May 8, 2017.
Jump up ^ "HPE | HPE CS700 2.0 for VMware". H22208.www2.hpe.com. May 1, 2017. Retrieved May 7, 2017.
Jump up ^ "Intel® Security Advisory regarding escalation o... |Intel Communities". Communities.intel.com. Retrieved May 7, 2017.
Jump up ^ "Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Remote Privilege Escalation". Support.lenovo.com. Retrieved May 7, 2017.
Jump up ^ "MythBusters: CVE-2017-5689". Embedi.com. Retrieved May 7, 2017.
Jump up ^ Charlie Demerjian (May 1, 2017). "Remote security exploit in all 2008+ Intel platforms". SemiAccurate.com. Retrieved May 7, 2017.
Jump up ^ "Sneaky hackers use Intel management tools to bypass Windows firewall". Retrieved June 10, 2017.
Jump up ^ Tung, Liam. "Windows firewall dodged by 'hot-patching' spies using Intel AMT, says Microsoft - ZDNet". Retrieved June 10, 2017.
Jump up ^ "PLATINUM continues to evolve, find ways to maintain invisibility". Retrieved June 10, 2017.
Jump up ^ "Malware Uses Obscure Intel CPU Feature to Steal Data and Avoid Firewalls". Retrieved June 10, 2017.
Jump up ^ "Hackers abuse low-level management feature for invisible backdoor". iTnews. Retrieved June 10, 2017.
Jump up ^ "Vxers exploit Intel's Active Management for malware-over-LAN • The Register". www.theregister.co.uk. Retrieved June 10, 2017.
Jump up ^ Security, heise. "Intel-Fernwartung AMT bei Angriffen auf PCs genutzt". Security. Retrieved June 10, 2017.
Jump up ^ "PLATINUM activity group file-transfer method using Intel AMT SOL". Channel 9. Retrieved June 10, 2017.
Jump up ^ Researchers find almost EVERY computer with an Intel Skylake and above CPU can be owned via USB.
Jump up ^ "Intel® Management Engine Critical Firmware Update (Intel SA-00086)". Intel.
Jump up ^ "Intel Chip Flaws Leave Millions of Devices Exposed". Wired.
Jump up ^ "Disabling AMT in BIOS". software.intel.com. Retrieved May 17, 2017.
Jump up ^ "Are consumer PCs safe from the Intel ME/AMT exploit? - SemiAccurate". semiaccurate.com.
Jump up ^ "Intel x86s hide another CPU that can take over your machine (you can't audit it)". Boing Boing. June 15, 2016. Retrieved May 11, 2017.
Jump up ^ "[coreboot] : AMT bug". Mail.coreboot.org. May 11, 2017. Retrieved June 13, 2017.
Jump up ^ "Disabling Intel AMT on Windows (and a simpler CVE-2017-5689 Mitigation Guide)". Social Media Marketing | Digital Marketing | Electronic Commerce. May 3, 2017. Retrieved May 17, 2017.
Jump up ^ "bartblaze/Disable-Intel-AMT". GitHub. Retrieved May 17, 2017.
Jump up ^ "mjg59/mei-amt-check". GitHub. Retrieved May 17, 2017.
Jump up ^ "Intel® AMT Critical Firmware Vulnerability". Intel. Retrieved May 17, 2017.
Jump up ^ "Positive Technologies Blog: Disabling Intel ME 11 via undocumented mode". Retrieved August 30, 2017.
Jump up ^ "Intel Patches Major Flaws in the Intel Management Engine". Extreme Tech.
Jump up ^ Vaughan-Nichols, Steven J. "Taurinus X200: Now the most 'Free Software' laptop on the planet - ZDNet".
Jump up ^ Kißling, Kristian. "Libreboot: Thinkpad X220 ohne Management Engine » Linux-Magazin". Linux-Magazin.
Jump up ^ online, heise. "Libiquity Taurinus X200: Linux-Notebook ohne Intels Management Engine". heise online.
Jump up ^ "Intel AMT Vulnerability Shows Intel's Management Engine Can Be Dangerous". May 2, 2017.
Jump up ^ "Purism Explains Why It Avoids Intel's AMT And Networking Cards For Its Privacy-Focused 'Librem' Notebooks". Tom's Hardware. August 29, 2016. Retrieved May 10, 2017.
Jump up ^ "The Free Software Foundation loves this laptop, but you won't".
Jump up ^ "FSF Endorses Yet Another (Outdated) Laptop - Phoronix". phoronix.com.
External links[edit]
Intel Active Management Technology
Intel Manageability Developer Community
Intel vPro Expert Center
Intel AMT Open Source Drivers and Tools
Intel 82573E Gigabit Ethernet Controller (Tekoa)
ARC4 Processor
AMT videos (select the desktop channel)
Intel AMT Client - Radmin Viewer 3.3
Intel vPro/AMT as a hardware antivirus
AMT Over the Internet Provisioning (OOB Manager)
Intel ME Secrets: Hidden code in your chipset and how to discover what exactly it does by Igor Skochinsky, talk at Code Blue 2014
Using Intel AMT and the Intel NUC with Ubuntu
show
v
t
e
Hacking in the 2010s
← 2000s Timeline 2020s →
Major incidents
2010
Australian cyberattacks
Operation Aurora
Operation Payback
2011
DigiNotar
DNSChanger
HBGary Federal
Operation AntiSec
Operation Tunisia
PlayStation
RSA SecurID compromise
2012
LinkedIn hack
Stratfor email leak
2013
South Korea cyberattack
Snapchat hack
2013 Yahoo! data breach
2014
Anthem medical data breach
Operation Tovar
iCloud leaks of celebrity photos
Sony Pictures hack
Russian hacker password theft
2014 Yahoo! data breach
2015
Office of Personnel Management data breach
Hacking Team
Ashley Madison data breach
VTech data breach
SWIFT banking hack
2016
Bangladesh Bank robbery
Hollywood Presbyterian Medical Center ransomware incident
Commission on Elections data breach
Democratic National Committee cyber attacks
DCCC cyber attacks
Dyn cyberattack
Russian interference in the 2016 U.S. elections
2017
WannaCry ransomware attack
Westminster cyberattack
Petya cyberattack
2017 cyberattacks on Ukraine
Equifax data breach
Deloitte breach
Disqus breach
2018
Trustico
Exactis
Atlanta cyberattack
Groups
Anonymous
associated events
Bureau 121
Cozy Bear
CyberBerkut
Derp
Equation Group
Fancy Bear
GNAA
Goatse Security
Guccifer 2.0
Hacking Team
Iranian Cyber Army
Lizard Squad
LulzRaft
LulzSec
New World Hackers
NullCrew
NSO Group
PayPal 14
PLA Unit 61398
PLATINUM
Pranknet
RedHack
Rocket Kitten
The Shadow Brokers
Syrian Electronic Army
TeaMp0isoN
Tailored Access Operations
UGNazi
Yemen Cyber Army
Individuals
George Hotz
Guccifer
Hector Monsegur
Jeremy Hammond
Junaid Hussain
Kristoffer von Hassel
Mustafa Al-Bassam
MLT
Ryan Ackroyd
Topiary
The Jester
weev
Major vulnerabilities
publicly disclosed
Evercookie (2010)
iSeeYou (2013)
Heartbleed (2014)
Shellshock (2014)
POODLE (2014)
Rootpipe (2014)
Row hammer (2014)
JASBUG (2015)
Stagefright (2015)
DROWN (2016)
Badlock (2016)
Dirty COW (2016)
Cloudbleed (2017)
Broadcom Wi-Fi (2017)
EternalBlue (2017)
DoublePulsar (2017)
Silent Bob is Silent (2017)
KRACK (2017)
ROCA vulnerability (2017)
BlueBorne (2017)
Meltdown (2018)
Spectre (2018)
EFAIL (2018)
Speculative Store Bypass (2018)
Lazy FP State Restore (2018)
TLBleed (2018)
SigSpoof (2018)
Foreshadow (2018)
Malware
Bad Rabbit
Careto / The Mask
CryptoLocker
Dexter
Duqu
Duqu 2.0
FinFisher
Flame
Gameover ZeuS
Mahdi
Metulji botnet
Mirai
NSA ANT catalog
Pegasus
Petya
R2D2
Shamoon
Stars virus
Stuxnet
Vault 7
WannaCry
X-Agent
show
v
t
e
Intel technology
Platforms
Centrino
Centrino 2
Viiv
MID
Tablet
CULV
Ultrabook
Skulltrail
NUC
Galileo
Edison
Curie
Discontinued
Common Building Block
MultiProcessor Specification
Intel Communication Streaming Architecture
Intel Inboard 386
Intel Play
MMC-1
MMC-2
Current
Advanced Programmable Interrupt Controller
Intel Turbo Boost
vPro
Intel Secure Key
Active Management Technology
AMT versions
High-bandwidth Digital Content Protection
High Definition Audio
Hub Architecture
Rapid Storage Technology
Enhanced SpeedStep
Serial Digital Video Out
Host Embedded Controller Interface
Hyper-threading
Omni-Path
Platform Environment Control Interface
QuickPath Interconnect
Platform Controller Hub
System Management Bus
Thunderbolt
Ultra Path Interconnect
Upcoming
Silicon Photonics Link
Retrieved from "https://en.wikipedia.org/w/index.php?title=Intel_Active_Management_Technology&oldid=863905434"
Categories:
Intel products
Out-of-band management
System administration
Hidden categories:
CS1 maint: Archived copy as title
All articles with dead external links
Articles with dead external links from November 2017
Articles with permanently dead external links
Use mdy dates from August 2018
Articles to be split from November 2017
All articles to be split
All articles with unsourced statements
Articles with unsourced statements from July 2011
Articles containing potentially dated statements from 2015
All articles containing potentially dated statements
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Article
Talk
Variants
Views
Read
Edit
View history
More
Search
Navigation
Main page
Contents
Featured content
Current events
Random article
Donate to Wikipedia
Wikipedia store
Interaction
Help
About Wikipedia
Community portal
Recent changes
Contact page
Tools
What links here
Related changes
Upload file
Special pages
Permanent link
Page information
Wikidata item
Cite this page
Print/export
Create a book
Download as PDF
Printable version
Languages
Deutsch
Français
Italiano
Português
Русский
Українська
中文
Edit links
This page was last edited on 13 October 2018, at 21:16 (UTC).
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization.
Privacy policy
About Wikipedia
Disclaimers
Contact Wikipedia
Developers
Cookie statement
Mobile view
Enable previews

values: mw-page-base noprint

values: mw-head-base noprint

values: firstHeading firstHeading en

values: siteSub noprint

attrs: class href

values: mw-jump-link #mw-head

values: mw-jump-link #p-search

value: p

values:
/wiki/Management_Engine
mw-redirect
Management Engine

value: small

value: tbody

value: table

attrs: class role

values:
plainlinks metadata ambox ambox-move
presentation

values:
/wiki/Internet_Protocol_Suite
mw-redirect
Internet Protocol Suite

values:
/wiki/Diskless_workstation
mw-redirect
Diskless workstation

values: Intelligent Platform Management Interface

values:
/wiki/Intel_Nehalem
mw-redirect
Intel Nehalem

values:
/wiki/Intel_Kaby_Lake
mw-redirect
Intel Kaby Lake

values:
/wiki/Trusted_Execution_Engine
mw-redirect
Trusted Execution Engine

values:
/wiki/Server_Platform_Services
mw-redirect
Server Platform Services

values:
/wiki/Intel_Skylake
mw-redirect
Intel Skylake

values: checkbox button toctogglecheckbox toctogglecheckbox display:none

values:
/wiki/Value_added_reseller
mw-redirect
Value added reseller

values:
/wiki/Random_access_memory
mw-redirect
Random access memory

values:
Small and medium business
border-bottom:1px dotted

values:
/wiki/KVM_Switch#KVM_over_IP_(iKVM)
mw-redirect
KVM Switch

values:
/wiki/Packet_(information_technology)
mw-redirect
Packet (information technology)

values:
/wiki/Heuristic_algorithm
mw-redirect
Heuristic algorithm

values:
/wiki/IEEE_802.11n
mw-redirect
IEEE 802.11n

values: This claim needs references to reliable sources. (July 2011)

values:
noprint Inline-Template Template-Fact
white-space:nowrap;

values:
/wiki/Packet_filter
mw-redirect
Packet filter

values:
/wiki/Network_adapter
mw-redirect
Network adapter

values:
/wiki/Universally_Unique_Identifier
mw-redirect
Universally Unique Identifier

values:
/wiki/Computer_software
mw-redirect
Computer software

values:
/wiki/Baseboard_management_controller
mw-redirect
Baseboard management controller

values: Edit section: Provisioning and integration

values:
/wiki/Universal_Serial_Bus
mw-redirect
Universal Serial Bus

values:
/wiki/Public_key_cryptography
mw-redirect
Public key cryptography

values:
/wiki/CMOS_memory
mw-redirect
CMOS memory

values: plainlinks noexcerpt noprint asof-tag update

values:
/wiki/Serial_Peripheral_Interface_Bus
mw-redirect
Serial Peripheral Interface Bus

values: Embedded Flash File System (page does not exist)

values:
/wiki/Express_Logic
mw-redirect
Express Logic

values:
/wiki/Java_applets
mw-redirect
Java applets

values:
/wiki/Memory_Controller_Hub
mw-redirect
Memory Controller Hub

values:
/wiki/IEEE_802.1x
mw-redirect
IEEE 802.1x

values:
/wiki/Anti-spyware_software
mw-redirect
Anti-spyware software

values:
/wiki/Pseudo-random_number_generator
mw-redirect
Pseudo-random number generator

values: Edit section: Known vulnerabilities and exploits

values:
/wiki/Keystroke_logger
mw-redirect
Keystroke logger

values: Common Vulnerabilities and Exposures (identifier)

values: display:table-cell;padding:0.2em 0.2em 0.2em 0.3em;vertical-align:middle

values: margin:0.5em 0 0.5em 1em;border:solid #aaa 1px

values:
/wiki/Lights_out_management
mw-redirect
Lights out management

values:
nofollow
external text
http://www.crn.com/white-box/201802550

values:
nofollow
external text
http://libreboot.org/faq/#intel

values: Category:CS1 maint: Archived copy as title

values:
nofollow
http://www.intel.com/technology/vpro/
external text

values:
nofollow
external text
http://www.planet-lab.org/files/AMT.pdf

values:
nofollow
external text
https://mjg59.dreamwidth.org/48429.html

values:
nofollow
external text
https://github.com/mjg59/mei-amt-check

values: -moz-column-width: 30em; -webkit-column-width: 30em; column-width: 30em; list-style-type: decimal;

values:
nofollow
external text
http://www.intel.com/go/vproexpert

values:
nofollow
http://www.openamt.org/
external text

values:
nofollow
http://video.intel.com/
external text

values: Code Blue (conference) (page does not exist)

values: Timeline of computer security hacker history

values: text-align:left; vertical-align:middle; padding:0 0.5em 0 0;

values: text-align:center; vertical-align:middle; padding:0 1px;

values: text-align:right; vertical-align:middle; padding:0 0 0 0.5em;

values: Office of Personnel Management data breach

values: Democratic National Committee cyber attacks

values: Democratic Congressional Campaign Committee cyber attacks

values: Russian interference in the 2016 United States elections

values: Timeline of events associated with Anonymous

values:
/wiki/Lazy_FP_State_Restore
mw-redirect
Lazy FP State Restore

values: nowraplinks hlist collapsible collapsed navbox-inner mw-collapsible mw-collapsed mw-made-collapsible

values:
/wiki/Intel_Curie
mw-redirect
Intel Curie

values: Intel Communication Streaming Architecture

values: Advanced Programmable Interrupt Controller

values:
/wiki/Intel_Secure_Key
mw-redirect
Intel Secure Key

values: High-bandwidth Digital Content Protection

values: nowraplinks collapsible autocollapse navbox-inner mw-collapsible mw-made-collapsible mw-collapsed

values: Category:All articles with dead external links

values: Category:Articles with dead external links from November 2017

values: Category:Articles with permanently dead external links

values: Category:Articles to be split from November 2017

values: Category:All articles with unsourced statements

values: Category:Articles with unsourced statements from July 2011

values: Category:Articles containing potentially dated statements from 2015

values: Category:All articles containing potentially dated statements

values: Discussion about edits from this IP address [ctrl-alt-n]

values: A list of edits made from this IP address [ctrl-alt-y]

values: You are encouraged to create an account and log in; however, it is not mandatory

values:
p-variants
navigation
vectorMenu emptyPortlet
p-variants-label

values: Past revisions of this page [ctrl-alt-h]

values: p-views navigation vectorTabs p-views-label

values:
p-cactions
navigation
vectorMenu emptyPortlet
p-cactions-label

values:
mw-wiki-logo
/wiki/Main_Page
Visit the main page

values:
/wiki/Main_Page
Visit the main page [ctrl-alt-z]
z

values: Featured content – the best of Wikipedia

values: Find background information on current events

values:
/wiki/Special:Random
Load a random article [ctrl-alt-x]
x

values: portal navigation p-navigation p-navigation-label

values: Guidance on how to use and edit Wikipedia

values: About the project, what you can do, where to find things

values: A list of recent changes in the wiki [ctrl-alt-r]

values: portal navigation p-interaction p-interaction-label

values: Intel Active Management Technology – German

values: Intel Active Management Technology – French

values:
https://it.wikipedia.org/wiki/IAMT
IAMT – Italian
it
it
interlanguage-link-target

values: Tecnologia de Gerenciamento Ativo – Portuguese

values: Active Management Technology – Ukrainian

values: mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-Intel_Active_Management_Technology rootpage-Intel_Active_Management_Technology skin-vector action-view