KVM-over-IP box vs built-in IPMI, Intel vPro or iDRAC: do you need extra hardware?

Out-of-band management in one paragraph

In-band tools such as remote desktop run inside the operating system, so they fail when it does. Out-of-band management uses a separate controller with its own firmware and network path. Intel's Device Management Toolkit docs describe AMT this way: it connects through the AMT firmware rather than the OS network stack. It keeps working while the device has power, even when it is off or unresponsive. An external KVM-over-IP box gets a similar result from outside: it captures HDMI and pretends to be a USB keyboard, mouse and drive. [1][7]

Intel AMT on business PCs

Intel describes AMT, the out-of-band feature of vPro, as letting administrators issue power actions and take over keyboard, video and mouse control. The listed power actions include power up, power down, power up to BIOS, reset and reset to BIOS. Its out-of-band management page says KVM over IP works even when the OS is not running, without additional equipment. [1][2]

The catch is setup. The toolkit's disk image redirection tutorial requires an activated and configured Intel vPro device, and says the device must be activated in Admin Control Mode. Plan this while the PC is in front of you, not after it fails. If you cannot confirm the PC has AMT and that you can activate it, treat it as not available. [3]

Server controllers: iDRAC, Supermicro and similar BMCs

Dell's iDRAC9 licence page shows that features are gated by tier. It lists power control, boot control and serial over LAN under remote presence in the base feature set. It describes Enterprise as adding further remote presence features with advanced management capabilities, and its feature list includes a virtual console with HTML5 or VNC, virtual media and folders, and remote file share. Datacenter includes all the features of Enterprise. The page's tier table did not render in a form we could read, so confirm which tier carries the console on your own server. A used PowerEdge server bought for a homelab may carry only the lower licence, so check the licence screen before assuming a console exists. [4]

Supermicro's BMC page lists an HTML5 KVM console, virtual media with simultaneous floppy and CD/DVD redirection over HTTP, HTTPS or CIFS/SMB, and Redfish APIs. It also lists a licence SKU, SFT-OOB-LIC, on Supermicro's eStore without saying on that page which features need it. Newer X12/X13 and H12/H13 boards list a unique pre-programmed default password. [5]

Checklist: does your machine already have it?

Work through this with the machine in front of you. One yes in the first three rows usually means you should try the built-in route first.

• Look for a dedicated management network port on a server, often labelled for iDRAC, iLO or IPMI, and check the board manual for a BMC.
• On a business PC, check the maker's spec sheet for Intel vPro or Intel AMT, then look for the AMT or ME setup in its firmware menus.
• Open the controller's web page on the local network and confirm a remote console actually launches. A licence screen or a greyed-out console button means the feature is gated.
• Mount a small ISO through the controller's virtual media and boot it once. That proves the reinstall path.
• Power the machine fully off and turn it on from the controller. That proves the power path.
• Record the controller's address, the account you created and where its password is stored.

When an external KVM still makes sense

An external box is worth it when the checklist above finds no management controller on the machine. It also fits when the console feature needs a licence you do not have, or when you want one familiar tool across several brands. GL.iNet's FAQ says any device with HDMI output and USB input can be controlled. Comet Pro lists at $179.99 on GL.iNet's US store. [7][8]

Compare that against the alternative. If a used server's console needs a licence upgrade, price the licence and the box side by side. The external KVM also adds a second device to secure and update.

Do not expose any of them to the internet

CISA's Binding Operational Directive 23-02 names out-of-band server management interfaces, such as iLO and iDRAC, as in scope. Federal agencies must remove them from the public internet or protect them with a policy enforcement point separate from the interface itself. The directive applies to agencies, but the reasoning applies at home. These interfaces give full control of a machine, and attackers target them. [6]

Reach a built-in controller the same way you would reach an external KVM: over a VPN or mesh network, never through a forwarded port. Our security checklist covers the steps. [6]

Sources & verification

Product details and prices can change. Check the linked provider before buying.

1. Intel Device Management Toolkit Docs: Out-of-band management Accessed 30 Oct 2026
2. Intel Device Management Toolkit Docs: Overview Accessed 30 Oct 2026
3. Intel Device Management Toolkit Docs: IDE redirection Accessed 30 Oct 2026
4. Dell Support: iDRAC9 licensing overview Accessed 30 Oct 2026
5. Supermicro: BMC resources Accessed 30 Oct 2026
6. CISA: Binding Operational Directive 23-02, Mitigating the risk from internet-exposed management interfaces Accessed 30 Oct 2026
7. GL.iNet KVM Docs: Quick FAQs about GL.iNet KVM Accessed 30 Oct 2026
8. GL.iNet: Comet Pro (GL-RM10) product page Accessed 30 Oct 2026