Intel looks to improve desktop security with vPro upgrade

IDG News Service -

Intel Corp. released an upgrade to its vPro bundle of automated PC management technologies on Monday, saying that the new chip package delivers better data security for desktop systems than the original version launched last year did.

Systems administrators can use the new processor and chip set bundle, which was code-named Weybridge, to automatically send software patches to thousands of desktop PCs, according to Intel officials. They said the upgraded technology can also be tapped to instruct PCs that aren't being used to enter a sleep state or to remotely diagnose broken systems.

In conjunction with Intel's announcement, Hewlett-Packard Co., Dell Inc. and Lenovo Group Ltd. all introduced desktop PCs based on the new vPro bundle, which officially is called the Intel vPro Processor Technology for 2007.

Intel plans to add a version of vPro for notebooks during the first half of year, at the same time that the company upgrades its current Centrino Pro processor with a new chip that is being called Montevina.

Greg Bryant, general manager of Intel's digital office platform division, said during a briefing in Boston that to qualify for the vPro label, a PC must use an Intel Core 2 Duo processor from the E6550 device on up, plus the company's Q35 Express chip set and other hardware-based networking and virtualization technologies.

Compared with the original vPro platform launched last September, the upgraded components will make it easier for IT administrators to manage large fleets of PCs, Bryant said. But perhaps the biggest improvement will be in security, he added.

For example, the new vPro offering uses virtualization to run some security software in a protected section of a system's hard drive. It also includes time-based filters for detecting the patterns of security attacks, as well as on-chip memory for storing network security credentials in hardware instead of more-vulnerable software.

Those features won't replace conventional security applications but are designed to work alongside such products, Bryant said. He claimed that as security threats have grown more sophisticated, IT managers need a combination of software and hardware to defeat them.

"Much security today is based on threats running in software on the OS, which has to be working for [the security mechanisms] to be effective," Bryant said. "Some things, like how memory is accessed, are controlled by the chip set. So if we don't do it, who is going to do it?"

Dean McCarron, an analyst at Mercury Research Inc. in Cave Creek, Ariz., said that Weybridge includes enough improvements to attract new corporate buyers, although he noted that it isn't aimed at small and midsize businesses.