Intel announced security and manageability enhancements for its “Sandy Bridge” range of Core processors. Targeting desktop PCs, portables, and embedded devices such as ATMs, the vPro technology includes a “poison pill” that can disable stolen devices, a new identify protection feature, enhanced KVM (keyboard video mouse) operation, plus automated configuration features.

Intel's announcement today touted its "newest family of business processors," but the company didn't actually have any fresh CPU model numbers to unveil. (That's a relief, too, since the company's pre-Consumer Electronics Show launch in January already unveiled 15 new "Sandy Bridge" mobile processors and 14 new desktop CPUs; later on, six embedded-specific stablemates came to light too.)

These 32nm Sandy Bridge chips gained a new microarchitecture, a 256-bit instruction set known as AVX (advanced vector extensions), enhanced GPUs (graphics processing units), and dedicated silicon for tasks such as transcoding video from one format to another. They require only simple I/O controllers, offered in at least ten models (the Q67, H67, H61, QM67, HM67, P67, HM65, B65, and QS67) collectively code-named Cougar Point.

Regarding the newly announced vPro enhancements, it seems these are already baked into most existing Sandy Bridge CPUs and Cougar Point controllers (the tables later in this story explain which of the CPUs can support VPro). Intel can simply turn on the capabilities at the behest of its OEM customers — for an undisclosed extra fee, naturally.

"vPro" is a term for availability security and manageability upgrades that do not appear to be the same for every Sandy Bridge CPU. (Intel's announcement and 2nd Generation Intel Core vPro product page do not do much to elucidate this.)

According to Intel, all second-generation Core vPro processors include its Anti-Theft (AT) Technology version 3.0. The previous version of AT already allowed administrators to send out "poison pills" that would disable stolen, Internet-connected devices when they were turned on: The new version uses encrypted SMS message to extend this functionality to 3G cellular networks, the chipmaker says.

Intel says AT 3.0 also offers a Locator Beacon technology that uses cellular networks and GPS receivers to locate missing laptops. If the devices went missing when they were in the vulnerable S3 standby state, the company adds, they'll now be protected by an encryption login that's more secure than the usual user name and password.

"Select" second-generation Core vPro processors also get Intel's Identity Protection Technology, which is designed to work with select VPNs, banking, commerce, and other secure sites. IPT supplements the normal one-factor username/password security with a six-digit numerical password, the latter automatically generated by authorized devices every thirty seconds.

According to Intel, some of the second-generation Core VPro devices include enhanced KVM technology that may be activated by remote administrators before an operating system boots and now supports resolutions up to 1900 x 1200 pixels. Also offered is a new Host-Based Configuration feature that "completely automates the process of setting up the vPro functions on new computers, [letting] … even thousands of computers can be configured simultaneously in a couple of minutes."

Intel also touted vPro for embedded devices, though here it used the moniker to refer to three previously announced technologies: Active Management Technology 7.0, Virtualization Technology (VT), and Trusted Execution Technology (TXT). Regarding AMT 7.0, the chipmaker said this allows customers to power on/off, diagnose, or repair remote devices such as digital signs or ATMs.

Finally, Intel says it will soon release a processor known as the Xeon E3-1200, which will include vPro technology plus ECC (error correcting code) memory support. This chip will be "ideal for a wide range of compute-intensive applications in market segments such as retail, digital signage and banking," according to the company.

Intel found a flaw in its Cougar Point that it disclosed at the end of January, explaining that the controllers' 3Gbps SATA ports could deteriorate over time and ultimately lead to any connected drives becoming totally inaccessible. The chipmaker says it will continue to supply flawed parts to vendors who promise not to use 3Gbps SATA, is now shipping redesigned ones in some quantity, and will be back to providing the originally envisaged volumes in April.

This article was originally published on LinuxDevices.com and has been donated to the open source community by QuinStreet Inc. Please visit LinuxToday.com for up-to-date news and articles about Linux and open source.