Hello

In AMT 9.0.3, - with Q86 chipset and 4770S CPU - , I encounter with that errors.

In VNC viewer plus, whenever i try to connect with amtKVM, it request password and gives that error

"KVM tunnel disconnected"

In Manageability Terminal, it prompt me

"Serial Over LAN"

"Unable to connect to serial over lan port (IMR_RES_ERROR). Check that the redirection port is enabled and serial over lan feature is turned on"

I tried many thing like manual and wizard configuration, client and admin mode.

I attached my SCS Discovery XML.

Hi,

I'm pretty new to using and understanding the benefits of the vPro and AMT MEBx, so have just started to utilise some of these abilities and the demonstration manage tools in the developers centrer (such as Intel® vPro™ Platform Solution Manager and the Open MDTK).

However, I have come across 2 issue:

1. In the main, I am looking to be able to remote access a machine in order that I can re-image it. We use Ghost but cannot utilise PXE, however, the remote IDE redirection to a CD ISO image would be perfect. I can get the remote machine to boot fine from the redirected ISO, however, once the machine has booted into the Ghost WinPE environment and initiate the image trasfer (reading or writing), the transfer speed is PAINFULLY slow. What I mean by this is it lumbers along at around 60MB/s rather than 700+ MB/s. If I start the boot process from a read CD or USB drive, the trasfer rates are normal. This means that the image process take around 8 hours to complete rather than 40 mins.
2. When I boot into the Ghost WinPE client on the remote machine, I can connect to the machine using SOL and I can get to to the SAC prompt, and from there I can get to the command prompt of the remote machine. However, when I connect using SOL to Windows 7 running on the same machine I get nothing. The Intel Management Drivers are installed on the Windows 7 OS and SOL driver is installed. What am I doing wrong?

Many thanks for any help

Chris

Hi! I have a dev network configured just for trying out vPro features and figuring out how we're going to implement vPro. Right now, every feature works great when I provision my machine with an SCS profile with no TLS and a digest user. However, when I enable Kerberos and try to connect to SOL I get the error "IMR_RES_AUTH_FAILED". Here's the detailed info:

== Test Network Configuration ==

2 domain controllers running server 2012 and DNS

1 dhcp server running server 2012

1 certificate authority /w IIS for AIA\CDP points running server 2012

1 SCS server running server 2012 and sql server express 2012

== Test Network Validation ==

domain controllers - dcdiag and dnslint both pass successfully

certificate authority - pkiview.msc shows everything as clean, and I can issue certificates and verify them with certutil.

== Intel vPro Configuration ==

I am using Intel SCS to provision my machines. SCS is using a self-signed provisioning certificate from my CA. The CA is a standalone enterprise CA which the server and test clients trust. I have imported the provisioning certificate into the RCS service via RCSUtil.exe and verified that the import worked correctly via RCSUtil.exe To provision a client, I use the configurator after manually adding the SHA1 thumbprint of the certificate authority's CA certificate to MEBx. Provisioning works great.

== Client Information ==

Dell Optiplex 990

AMT Version 7.1.70

BIOS Version A17 (latest)

== Steps to Repro Problem ==

1) Provision a vPro client with the configurator and a profile containing an active directory user but not other optional settings (no TLS, home domains, etc).

2) Ensure that the SOL port redirection is enabled in MEBx.

3) Launch the webUI to the client and confirm that it is working.

4) Launch manageability commander v0.1.26 (latest) and connect to the client.

5) Click the 'Remote Control' tab, then click 'Take Control'.

Expected results: The SOL window will pop up. Rebooting into the BIOS will show you the SOL version of the BIOS.

Actual results: An error occurs with the following text: "Unable to connect to serial-over-lan port (IMR_RES_AUTH_FAILED). Check that the redirection port is enabled and serial-over-lan feature is turned on."

== Success Conditions ==

If I provision the vPro client with a profile that contains a digest user, and connect to the client in Manageability commander with the digest user, everything works properly. It only fails with a Kerberos user. Also, it's important to note that the WebUI, KVM, and IDER work correctly with both a Kerberos and Digest user. I'm only having Kerberos trouble with SOL.

== Diagnostics ==

I've tried the following things:

* Ensured that the AD user has all permissions in the SCS profile.

* Ensured that the AD user does not have a token size too large.

* Ensured that every certificate in the chain has a 2048 bit key and is SHA1.

* Packed sniffed the traffic to ensure that the correct SPN is being requested successfully ( HTTP/<clientfqdn>:16992 )

* Ensured that the AMT AD object is created, and that it has HTTP SPN's registered correctly, and that the windows computer object doesn't have competing SPN's.

* Ensured that there are no duplicate SPN's on the domain.

I'm at a loss! Does anyone have a lead as to why SOL would fail with a Kerberos user but not a digest user, when WebUI, KVM (via VNC+), and IDER (via VNC+) all work correctly? I can provide any other details if necessary.

Thanks!

Hi,

When I connect to any target PC on my vPro test network via SOL and\or KVM, it causes the target PC's screen to flicker about once every 10 seconds. The screen just goes black for a second or so, then comes back to whatever it was displaying. This flicker is OS independent and happens while I'm in the BIOS, during boot, while doing Dell diagnostics, and inside the OS itself. It happens on multiple models of Dell Optiplex (990 and 960). The target systems do not have any discrete graphics or network cards installed. They only have the Intel onboard graphics and nic.

For KVM, I'm using RealVNC 1.2.5 r111763.

For SOL, I'm using Manageability Commander v0.1.26.

I'm using Kerberos, but not TLS. I believe I have the simplest-possible SCS profile configured. Has anyone else experienced this 'flicker'?

Thanks!

Dear all

Sorry for bothing.

I am testing vpro for NB.

I got a PDF (Haswell PCH_ME_Compliancy_5MB_1_2.pdf), one of vpro is Intel TXT.

SCLEAN ?

I don't know what is SCLEAN,could you please provide me the information of SCLEAN?

Thank you so much!

Hello folks!

I have configured and installed SCCM 2012 Out of Band Management (OOB).
During provisioning of the Client I get below error message in the "amtopmgr.log"

==============================Qoute - amtopmgr.log====================

==============================UnQoute - amtopmgr.log====================

I am able to perform "PowerOn, PowerOff" via the "Out of band Manager Console".

I am able to Access the Intel AMT Web Gui at https://fqdn:16993

If I try to Access SOL Console, I only see an black screen with an blinking cursor..

Does anyone have an hint for me to resolve this?

Thanks
Best Regards

Anders Horgen

Hello.

We have SCS server and  several  configured workstations  in SCS console .

Lastly we installed add-on for SCCM 2012 and did run Intel AMT Discover and Report Task Sequence.

None of workstation from SCS consle didnt aperar in Intel AMT Systems: Configured Collection.

I 've check tables in SQL server database - they include field that are required to workstation to apear in sccm collection.

What else are required.

Have you got any sugestion ?

I include sql query for  Intel AMT Systems: Configured Collection.

Any help will be apreciated.

Intel IT Center Presents:
Assessing Mobility: How Far Will IT Take It?
Wednesday, October 9^th, 11:00 a.m. PDT
Register now >

The mobile evolution is fast becoming a revolution, and investment is required to deliver productivity, security and TCO (total cost of ownership). Join Intel IT Center experts Mark Densham, Client and Collaboration Engineering Director, and Steve Birkel, Enterprise Architecture Director, as they discuss the impacts of mobility on productivity. Topics include:

• Frustration about security and productivity(how do we leverage security without affecting user experience?)
• How to develop one app base across different platforms?(since apps are kept separately on PC, smartphone, tablet, etc.)
• Group productivity vs. individual productivity
• Realization that an app environment needs to be re-architected for better productivity
  

Learn what trends are affecting mobile productivity in the workplace and the impacts on IT.Join this highly informative
webinar hosted by Intel’s Chris Peters on today October 9th at 11:00 a.m. PDT, with a live question and answer to follow.
Register now >

SCCM 2007 SP2.  We are using in-band provisioning for our out of band management.  On the whole it seems to work fine, however, there are a significant number of machines (>100) where SCCM sees the clients as "Unknown".  The oobmgmt.log files on these clients all show "!! Device is already provisioned".

These are machines which have been rebuilt (not renamed) without being unprovisioned first.

I booted into the Mbex bios (CTRL P).  Unprovisioned a couple of the machines.  SCCM then displayed these as "Not Provisioned".   They then provisioned no problem.

Because there are over one hundred of these "Unknown" machines I would like to find a way to automate the unprovisioning in the Mbex bios so that it isn't necessary to visit all the machines with this issue.

Unprovisionex.exe Utility

Have been trying to use the unprovisionex.exe utility.  Windows 7 32-bit, IE10.  Have tried the following:

Unprovisionex.exe -hostname hostname.domain.com -tls -full

Unprovisionex.exe -hostname hostname.domain.com -tls -ignorecert -full

Unprovisionex.exe -hostname hostname.domain.com -user admin -pass password -full

But keep getting "And exception occurred while attempting to unprovision (FULL) the system.  The request failed with HTTP status 401: Unauthorized.

Web Access

I have also tried to connect as follows:

https://hostname.domain.com:16993

This gets me to a login screen but I am then unable to logon.  I have tried adding the registry key FEATURE_INCLUDE_PORT_IN_SPN_KB908209.

Any help would be greatly appreciated.

Thanks.

Hello,

i'm using Intel AMT to connect to my HTPC and everytime I try to shut the pc down while being connected to the computer, the pc goes off just to turn on again after a few seconds. The solution is to let it reboot, use the Intel Management software to disconnect the AMT KVM connection and then to shut the pc down. OS is Windows  8.1, board is a DQ87PG. Is there a setting which deactivates this "feature"?

Many Regards

Florian

I'm having some challenges trying to get Intel AMT working upon bootup on the X1 Carbons.  I can get it working on the other Lenovo models (T420, T430, etc.), but not the X1 with ethernet adapter.  I've been utilizing AMT for other Lenovo devices, so I'm familiar with setting it up.

I can get the network dongle to connect via bootup via LAN option in the BIOS, so I'm assuming that AMT should be able to see/read those USB drivers for the network dongle?  For the LAN bootup option, there is "Emuerating for ASIX USB dongle..." message that enables the X1 USB 2.0 Ethernet adapter and gets me an IP address.

However when trying to connect when utilizing Intel AMT (CTRL-P option) on the X1 Carbon, there are no network lights on the ethernet adapter.  I've updated the Intel AMT management engine firmware, SOL driver, USB drivers, BIOS and other drivers to the latest version, but I can't still get it to connect (no network lights).

Any thoughts on why this isn't working?

Hello

i create this topic to intel AMT Vpro for the best practice to increase the queue of rcs

I have 35 000 computers with AMT for stop and start automaticly

I write a script with powershell for build a new certificate if the local certificate are broken

i read on the intel manual for VPRO a limit to build 200 certificate in the same time via RCS , i use AD to generate my certificate

I have an error when a lot of certificate of computer expire in the same time "rcs buffer full"

Do you have any ideas to increase the limit of certificate generate ?

registry ?

intel SCS ?

cdt

Hello around.

We managed to set up our OoB Managment with SCCM 2012 SP1 on a Windows Server 2012 some time ago.
Now we got a little problem, perhaps someone can point me the right direction.
I can discover and provision clients with AMT Version 5.2.1 and up without problem but when i try to
discover a client with Version 5.0.1 or earlier i get a TLS handshake error. We found out, that the communication over port 16993
seems to be the problem, but the other clients also use this port and work great. The clients are in the same IP subnet, we checked
Firewall and IPsec-Rules but provisioning dosen't work.

I tried to provision with Intels SCS Console and the ACM_Configure but get the same error here. (Certificate Template was modified before)
Also Version 5.2.1 works fine.
Now I was wondering if there is  a list with things that have changed between Version 5.0.1 and 5.2.1. Perhaps we can isolate the problem.

Normaly provisioning shouldn't work for any Client if it is a certificate or network problem.
Any help or suggestions?

Thank's in advance.
Thomas

We have been using vPro for awhile and are able to access the WebGUI using port 16992.  It now seems that after turning on TPM in the BIOS and encrypting our drives, that we have to use port 16993 to access the WebGUI for vPro.

Is this behavior normal?  Does anyone out there have experience with this?

Anthonyocker

Hello,

I've downloaded and installed the latest Version of the SCS 9. The RCS-Service was correctly updated by the installer. But the Problem will be the Installation of the add-on for SCCM 2012. Version 1.0 and 1.1 are failing to install because they can't connect to the RCS-Service. And Version 2.0 of the add-on which is mentioned in the documantation can't be found in the download center.

Has anybody any hints for the problem?

Kind Regards

Michael Rudolph

Trying to use Intel vPro as a replacement for IPMI or perhaps an Avocent remote KVM. We are looking for a simple, easily configured setup.

1) We don't want (or need) certificates.

2) We don't want (or need) a dedicated Management Presence Server.

3) Encryption is assumed via VPN to a trusted local network; we don't need it either.

All we're looking for is the ability to access the BIOS in the (rare) event of a small business server outage without having to dispatch somebody onsite. Servers all running RHEL/CentOS 6. Is this possible?

Hello

first we provisioned our devices with the buildin functions of the SCCM 2012. This works fine and the AMT Status was shown as provisioned. Now we bought new devices with firmware version 9.0 which isn't supported by the buildin method of the SCCM 2012. So I decided to use SCS and the addon for the SCCM. After some struggeling I've got the whole think running with SCS 8 and version 1.0 of the addon. The status was shown as "Externally Provisioned" and they could be accessed trough the oob-management console. Yesterday I updated the whole system to SCS 9 and addon 2.0. Now any machine which is provisioned with the remote_configure.bat method is shown with status "Detected" but the log-file shows that they were configured with exit code 0 and in the RCS console they look fine.

Has anybody an idea what's going wrong?

Regards

Michael

Hello,

Can someone explain why SCCM require and UPN for the field Alternate subject name ?

Workstation Authentication  

You must configure the Subject Name for Build from this Active Directory information, and then select Common name for the Subject name format, clear the DNS name and select the User principal name (UPN) for the alternative subject name.

If my understanding is right the RADIUS athentication for Workstation authentication requires à FQDN / Common Name ? So why does SCCme ask for an UPN ?

Best regards,

Michel

HI all,

I'm trying to find some documentation on integrating Intel vPro with Verdiem technology.  Anyone have any experience doing this??  I don't appear to be having any success.  Both solutions are working fine independently of each other but just can't get Verdiem server to detect a 'vPro wake capable' machine.

https://www.google.ie/url?sa=t&rct=j&q=&esrc=s&frm=1&source=web&cd=3&cad=rja&ved=0CDUQFjAC&url=https://communities.intel.com/servlet/JiveServlet/downloadBody/4403-102-1-7115/21836_Intel_Verdiem_WP_Final2.pdf&ei=K5KPUsfHEsqItAaisoGADA&usg=AFQjCNH0bqkgoL66oeiVE5WwEygjuZvmbQ&bvm=bv.56988011,d.Yms

Thanks,

Jim

Hi there!

I just purchased an Intel NUC with the i5 ivy bridge chipset.  Specifically, DC53427HYE.  The most interesting aspect of this device to me is the Intel AMT feature.  I verified that this NUC has an Intel Core i5 3427U CPU, which, according to Ark, does in fact have vPro technology on board.

I have two problems so far.

First, entering the Intel MEBx configuration is *extremely* difficult.  I can get into the BIOS setup (F2), BIOS update (F7), and boot device selection (F10) quite easily.  But accessing the MEBx configuration via Ctrl-P is impossible.  I have found that Ctrl-Alt-P works, about 1 in 100 times.  I've managed to get into MEBx about 3 times now.  It seems to be a very sensitive timing problem.

Secondly, when I have managed to get into MEBx, the default password does not work.  I have tried, "admin", "qd,in", and "P@ssw0rd".  None of these are accepted.  I have reset the BIOS/CMOS by closing jumpers 1 and 2 next to the memory modules, and tried "admin" and "qd,in" once again.  No luck.

I have updated the BIOS itself from the 4/25/2013 BIOS that it came with, to the 11/16/2013 version 0028.  Still no luck.

Please help?