Intel Communities: Message List

vPro and Godaddy - SSL Certificate for SCCM 2012

webadmin@intel.com — Wed, 13 Jun 2012 17:41:19 GMT

GoDaddy is now saying we need to purchase a Deluxe SSL cert for vPro activation instead of a Standard SSL cert. They've told me it was an Intel decision. Did I miss something?

vP

webadmin@intel.com — Wed, 13 Jun 2012 17:32:52 GMT

Spoke to Godaddy this morning to get a Standard SSL cert for vPro activation and SCCM 2012. They said that a few days ago they were advised by Intel to only allow Deluxe SSL certs for vPro activation. Did I miss something?

Re: What's the secret to getting IDE-Redirect / Serial Connection 'active' in SCCM?

webadmin@intel.com — Mon, 12 Jan 2009 21:30:58 GMT

Trevor,

I think you're doing pretty well, in my opinion. I'm like you, largley self taught most things I do. AMT and vPro has been probably the toughest thing I've had to get my head around and get to work in my environment. There's so many pieces and places where things could go wrong!

I hadn't been able to get any of my systems provisioned until I upgraded their AMT BIOS to 3.2.2, there was a bug fix that helped me out on that one. Also, I'm working to come up with a way to rename 95% of our systems - it seems that AMT doesn't like an underscore in a computer name (they've actually been true to the real DNS spec) so we're working to rename all our systems so they can be provisioned. Yuk.

Focus on the light!

Re: What's the secret to getting IDE-Redirect / Serial Connection 'active' in SCCM?

webadmin@intel.com — Mon, 12 Jan 2009 15:38:19 GMT

The only way I caught mine was to read Matt's post. I don't know about you but this whole AMT cert configuration has been quite a bit to get my head around. I've never been very cert-savvy and this has all been a wake-up call for me to become cert aware. I've been working with vPro now for about a year and a half and still don't seem to have gotten what-needs-to-go-where all down and figured out. I'm learning as I go.

This morning I just found one of my XP admin workstations that couldn't connect to a provisioned vPro system and with Matt's help I realized that the admin workstation did not have our domain root cert on it, in the Trusted Store. I always thought that was automatic in a Win2K domain but it looks like I'm still figuring all this stuff out!

Re: GetAMTPowerState fail with result 0x80072F8F error in OOBConsole.log

webadmin@intel.com — Mon, 12 Jan 2009 15:28:29 GMT

No, it doesn't show as valid. I imported the cert and voila! I'm good to go. Thanks for the tip on this one! This cert is the root cert for our domain / organization. I better look into this as I always assumed that all our domain-attached systems got this automatically! Thanks again for the heads up!

Re: What's the secret to getting IDE-Redirect / Serial Connection 'active' in SCCM?

webadmin@intel.com — Fri, 09 Jan 2009 23:59:07 GMT

Trevor,

Look at Matt's answer to my question in this thread, it's the second post in the thread. Here's what he says....

Potential Root cause(s):

The OOBConsole.log states the following error "IMR_SOLOpenTCPSession2 with user = <user> fail with result:0x20, description:Failed to Establish TLS Connection" and your AMT Web Certificates are being issued from a Subordinate Certificate Authority.
- Full certificate chain is not being pass correctly during a SOL/IDER session within SCCM. Place a copy of the Subordinate Certificate Authority certificate in the Local Computer - "Trusted Root Certificate Authorities" of the server or workstation that the Out Of Band Management Console is run from.

Hope this helps!

Re: GetAMTPowerState fail with result 0x80072F8F error in OOBConsole.log

webadmin@intel.com — Fri, 09 Jan 2009 22:40:51 GMT

Hello again Matt.

I can power control my systems from the Power Control option. I can also connect to systems with the web ui however. So it must be a Kerberos issue. My systems are 3.2.2 rev.

Re: What's the secret to getting IDE-Redirect / Serial Connection 'active' in SCCM?

webadmin@intel.com — Fri, 09 Jan 2009 21:51:18 GMT

I know this is a dumb question, and I apologize for it, but did you copy the SCCM / AMT server cert to your workstation's local cert store?

GetAMTPowerState fail with result 0x80072F8F error in OOBConsole.log

webadmin@intel.com — Thu, 08 Jan 2009 22:43:12 GMT

Can anyone translate an error 0x80072F8F for me? I'm working trying to get my SCCM SP1 console to be able to connect to provisioned xp machines. I've imported the AMT cert to the system local cert store. The OOBConsole.log is filled with

GetAMTPowerState fail with result 0x80072F8F

errors. Nothing else just them. I'm sure I've missed something simple and I can connect to the same workstations with my Vista workstation.

Re: What's the secret to getting IDE-Redirect / Serial Connection 'active' in SCCM?

webadmin@intel.com — Thu, 08 Jan 2009 21:28:28 GMT

Trevor,

Yes, I'm not sure where my issue is either. I'll check an XP workstation and see that's the issue. My OOB Console window looks like the image.