Intel Communities : Thread List - Activation

Intel vPro Activator LiveCD @ IDF

webadmin@intel.com — Fri, 23 Oct 2009 13:05:13 GMT

A few months back I've posted the vPro Activator LiveCD utility, which helps perform bare-metal provisioning of vPro system. Last month my friends at the DO SMB team, Teri and Abdul presenested a session on vPro SMB enablement at IDF 2009 in San-Francisco. One of the topics in the session was a real-world usage of the Activator LiveCD for Management Service Providers:

To download the entire presentaiton go to:

http://www.intel.com/go/idfsessions then search for:

Search for items containing: PROS004

in the: Session ID

Activator utility, provisioning options

art.flores@hotmail.com — Wed, 06 Aug 2008 16:49:00 GMT

After learning of the provisioning methods for the Intel AMT device (Manual, USB one-touch, OEM pre-load, RCFG with certificates), I was disappointed that there is not an easier solution option available.

If our computers/network are behind a corporate firewall, and security is not a concern, shouldn’t there be an easier way to authenticate the Intel AMT device using software only, i.e. a scripted solution between the client and the server?

Are there any other options that I am not aware of to complete the provision process using software only, i.e. software utilities between the AMT devices and the server?

I have read about the RCT, aka Activator.exe utility, and tried to provision a computer but it didn't work. Will the Activator utility work with out having put any pre-shared keys into the Intel AMT device? Or does it require the keys in order to work? Thanks.

USB Key Provision in PSK without "provisionserver" DNS entry

webadmin@intel.com — Tue, 08 Sep 2009 19:14:46 GMT

I´m trying to provision a mix of AMT machines using USB Key provisioning and PSK (Landesk 8.8 Sp2a) - due to the DNS infrastructure I can´t define option 15 (Provisioning server) as I will have multiple Landesk server. Is there a way to edit the setup.bin file to pass on the IP address of the provisioning server so that it does not try to resolveusing DNS?

OOB console terminal display in windows2008

webadmin@intel.com — Tue, 07 Apr 2009 06:51:14 GMT

My customer install SCCM SP1 on windows2008 server. We provision successfully with Lenovo/DELL vPro machine and can remotely control machine with OOB console,but there are no display in OOB console terminal when we remotely reboot vPro in BIOS. It's said that OOB console need use hyperterminal program for display and control, but Windows2008 remove hyperterminal program from accessories. We try to copy hyperterminal execution file and DLL in the OOB console directory to solve the issue,but it still does not work. Does anyone how to run OOB terminal in windows2008?

Thanks!

Bill

Remote Configuration /w SCCM SP1 & AMT 3.0.1

webadmin@intel.com — Mon, 12 Jan 2009 06:28:50 GMT

Hi,

My Environment:

SCCM 2007 SP1 running in mixed mode on Windows Server 2003 SP2 Standard
Enterprise Root CA on Server 2008 Enterprise
Purchased provisioning certificate from Verisign as per procedure.

I've followed the 'Quick Start Install Guide for MS CfgMgr SP1 Out of Band Management Rev1_9.pdf' document to setup and configure vPro in my environment.

All of the clients I have already been deployed and are running AMT 3.0.1 (hp dc7800p's mostly), they have not been provisioned previously.

From the Quick Start guide I've installed the WS-Man translator which apparently is required to provision AMT clients prior to 3.2.1, it's from here I'm a little bit confused as to how I can remotely provision these machines without having to manually touch each one??

SCCM clients are already pushed out and functional on all these clients so I have means of remotely configuring each machine via command line.. there's several hundred machines though so manually touching each machine isn't an option..

I guess I just need the high level steps on what I need to do?? any URL's to walk through this would be greatly appreciated too!

Thanks!

"Can NOT establish connection with target device" on Provision

webadmin@intel.com — Tue, 16 Dec 2008 14:16:33 GMT

We are attempting to provision systems already deployed within our organization. The systems I am dealing with now are HP dc7900p with AMT 5.0.1. Yesterday, I attempted to provision (client based) 22 systems, all new out of the box within the last 3 weeks. They have never bbeen provisioned or attempted to be provisioned.

Of the 22, 19 went fine and 3 I got the following log entries from AMTOPMGR.LOG:

>>>>>>>>>>>>>>>Provision task begin<<<<<<<<<<<<<<<

Provision target is indicated with SMS resource id. (MachineId = 333992 INSERT_CLIENT_FQDN)

Found valid basic machine property for machine id = 333992.

Warning: Currently we don't support mutual auth. Change to TLS server auth mode.

The provision mode for device INSERT_CLIENT_FQDN is 1.

Attempting to establish connection with target device using SOAP.

Found matched certificate hash in current memory of provisioning certificate

Create provisionHelper with (Hash: INSERT_HASH)

Set credential on provisionHelper...

Try to use provisioning account to connect target machine INSERT_CLIENT_FQDN...

Fail to connect and get core version of machine INSERT_CLIENT_FQDN using provisioning account #0.

Try to use default factory account to connect target machine INSERT_CLIENT_FQDN...

Fail to connect and get core version of machine INSERT_CLIENT_FQDN using default factory account.

Try to use provisioned account (random generated password) to connect target machine INSERT_CLIENT_FQDN...

Fail to connect and get core version of machine INSERT_CLIENT_FQDN using provisioned account (random generated password).

Error: Device internal error. Check Schannel, provision certificate, network configuration, device. (MachineId = 333992)

Error: Can NOT establish connection with target device. (MachineId = 333992)

>>>>>>>>>>>>>>>Provision task end<<<<<<<<<<<<<<<

Auto-worker Thread Pool: Warning, Failed to run task this time. Will retry(3) it

It runs this 3 times and then shows:

Auto-worker Thread Pool: Error, Can not execute the task successfully after try it 3 times. Remove it from task list.

STATMSG: ID=7212 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_AMT_OPERATION_MANAGER" SYS=SMSSERVER SITE=SMS PID=5448 TID=5928 GMTDATE=Tue Dec 16 13:16:18.180 2008 ISTR0="INSERT_CLIENT_FQDN" ISTR1="0x 0" ISTR2="Can NOT establish connection with target device." ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0

Looking for information about certifications? Check out the latest information regarding vPro and certifications.

gnszolnx@msn.com — Tue, 28 Oct 2008 22:05:44 GMT

These guides assist you in knowing how to authenticate using certifications with vPro, including information on how locate, obtatin, purchase, install, and procure a cert.

Go to http://communities.intel.com/docs/DOC-2225.

certification question for AMT SDK sample (eventlogreader.exe)

webadmin@intel.com — Thu, 23 Oct 2008 14:23:30 GMT

In AMT SDK, there are 1 eventlogreader samples (WS-Management). There are 1 cert option in the parameter. I provision the AMT client with SCCM. Which certification name need by type if I used MS CA server? For example, my CA server is sccmsp1.vprodemo.com, certification name is sccmsp1-vpro. I tried a lot of name, but the commander still display error. Who can educate me which name should be type in the case?

eventlogreader verbose -krb -user <username> -pass <password> -cert <name> -target <target> -tls -proxy <proxy ip:port> -proxyUserName <proxyUserName> -proxyPass <proxyPassword>

Bill

OOB console AMT protocol question

webadmin@intel.com — Wed, 22 Oct 2008 05:52:32 GMT

1 short question: which AMT protocol was using in SCCM SP1 OOB console between console and AMT client? SOAP or WS-Management? I saw there are 2 methods to AMT SDK.

bill

OOB Management Console Connects to AMT-Based Computers but Does Not Display Information

webadmin@intel.com — Tue, 13 May 2008 16:40:17 GMT

I used SCCMSP1 (build 4.00.6181.1000) provision with AMT 3.2.1 successfully and can remote power on/off AMT machine. When the out of band management console connects to the selected

AMT-based computer but console does not display any information. I check <ConfigMgrInstallationPath>\AdminUI\AdminUILog\Oobconsole.log. It indicate below reason: "GetAMTPowerState fail with result:0x80070035." This

could be a configuration issue in the AMT-based computer's BIOS extensions for

serial over LAN and IDE redirection. But I double check the setting and make sure enable "user name and password" for the serial over LAN and IDE redirection. Any wrong on the setting?

Thanks!

Bill

OOB Management Console connect to system but Normal Reboot stops at HP Remote Console

sandy.wood@da.ocgov.com — Wed, 10 Sep 2008 18:26:47 GMT

I can connect to a system using the OOB Mgmt Console but when I reboot and watch the reboot in the Serial Connection display, it stops at

HP Remote Console 02.01

Remote Console display bypassed, System in video mode = 12 (50,18)

Any idea why it stops here?