Remote Connect: System and Network Requirements

Introduction

HP Remote Connect is a remote support capability in HP Workforce Experience Platform (WXP). When purchased (or included with a plan), it enables an authorized IT user to access any PC that is managed within WXP

This article covers systems and network requirements for:

• In-band Remote Connect

• Out-of-band Remote Connect

In-Band Remote Connect

PC Requirements:

1. Both the Support Provider and Support Recipient PCs must be on Windows 11.

2. The PC of Support Provider, such as IT admin, must have HP Anyware Client 25.10 or later installed. The latest software is available at https://workforceexperience.hp.com/software/

3. The PC of the Support Recipient, such as employees, must have the Remote Connect plugin for the HP Insights agent installed. By default, when Automatic Updates enabled for the HP Insights agent, the Remote Connect plugin installs automatically if your tenant is entitled to the Remote Connect feature, and no further action is required. Only if Automatic Updates are disabled and Custom Updates Control is used, you must ensure that HP Insights Plugin Package 1.0.24.0 or later is configured in the tenant's ring deployment settings. For additional information about Custom Updates Control, please visit Managing Updates for HP Insights Agent.

Note: The installation of HP Insights Plugin Package 1.0.24.0 requires at least HP Insights version 5.25.130 and HP Insights Analytics version 4.2.2560.0.

Network Requirements

1. Outbound Ports:

   Both TCP and UDP protocols must be explicitly allowed for the ports listed in the below table:

Support Provider side:

Support Recipient side:

Note:

• Access to the corporate network is not needed for the use of Remote Connect.

• If the Support Recipient is outside of the corporate network (at home or in a public network), port requirements above may not be needed, depending on their location.

2. Access to HP’s Gateway addresses  

We recommend opening traffic to all locations where users are located for the best experience, but limiting to only specific regions will not prevent the In-Band Remote Connect feature from functioning.

Out-of-Band Remote Connect

PC requirements 

Support Provider (IT Admin / Support Agent)

Remote support technicians access Out-of-band sessions through the WXP portal. No additional local client software is required. 

Support Recipient (End-User PC) 

Hardware

• Intel® vPro® Enterprise (8th Generation or higher).

• Intel® AMT must be enabled in BIOS.

• PC must be able to power on and connect to the Internet via Intel wired or wireless vPro adapters.

• USB Ethernet adapters are not supported.

• Most docking station networks are not supported. Some Thunderbolt 4 docking stations may be compatible; check with the manufacturer.

Operating system

• Windows 10 or later.

• Out-of-band Remote Connect can still operate if the OS is corrupted, frozen, or unbootable.

Software

• PC must be enrolled in WXP.

• HP Insights Agent version 5.26.13 or later.

• Remote Connect plugin package 1.0.375.0 or later (included with HP Insights Plugin Package 1.0.27.0 or later).

User authorization & session controls

• A one-time consent code is required for every remote KVM session.

• End users can terminate sessions at any time using an always-available “End Session” control.

Network requirements

Out-of-band Remote Connect uses Intel Endpoint Cloud Services and requires outbound connectivity. Access to the internet is required for onboarding and for operation. No inbound ports are required.

Outbound port requirements (Support Recipient / End-User PC)

Firewall, SASE, Zero Trust, VPN and allow-list requirements

If operating in a closed network, VPN, SASE / Zero Trust environment, or behind a corporate firewall, allow-list the following secure URLs for trusted outbound connections.

• North America

  • www.hpdaas.com

  • discovery.hpdaas.com

  • downloads.hpdaas.com

  • endpointcloudservices.intel.com (HTTPS 443 and 4433)

  • *.endpointcloudservices.intel.com

  • amt.endpointcloudservices.intel.com (HTTPS 443 and 4433)

• European Union

  • eu.hpdaas.com

  • discovery.hpdaas.com

  • downloads.hpdaas.com

  • endpointcloudservices.intel.com (HTTPS 443 and 4433)

  • *.endpointcloudservices.intel.com

  • amt.endpointcloudservices.intel.com (HTTPS 443 and 4433)

Note: Additional region-based URLs may be introduced in the future.

Regional gateway requirements

Unlike In-band Remote Connect, Out-of-band Remote Connect does not require HP regional gateway IP ranges. Connections are brokered through Intel Endpoint Cloud Services.

Prerequisites checklist

• Prerequisites for enabling Out-of-band Remote Connect in WXP:

  • Requires a WXP account at the WXP Starter level or above (Starter, Standard, Pro, or Elite).

  • Enroll PCs into WXP with HP Insights Agent version 5.26.13 and Remote Connect plugin package 1.0.375.0 or later (included with HP Insights Plugin Package 1.0.27.0 or later).

  • Ensure Out-of-band Remote Connect is enabled for the account and PCs are entitled/assigned (auto-enroll or manual assignment).

• Hardware and network prerequisites for operation:

  • Intel® vPro® Enterprise 8th Generation or higher.

  • Windows 10 or later.

  • Enable Intel® AMT in BIOS.

  • Install/maintain latest Intel® AMT firmware / CSME versions for best functionality.

  • PC must be able to power on and connect to the Internet via Intel wired/wireless vPro adapters; USB Ethernet adapters and most docking stations are not supported.

Security & compliance highlights

• Every session requires a unique consent code.

• End users can terminate sessions at any time.

• Session data is encrypted with TLS 1.2+ and 256-bit encryption.

Contact Us

For any assistance, Create a support case or email us at support@wxp.hp.com.