Microsoft-vPro

RE: Intel WS-MAN Translator 1.0 released

swood — Wed, 08 Oct 2008 20:41:53 GMT

Step 6 (in Configuring the WS-MAN Translator) says to "...select the WS-Man Translator certificate created in previous step" - I did this and got this message:

"An attempt was made to load a program with an incorrect format. (Exception from HRESULT: 0x8007000B)" after clicking finish on Select TLS/forwarding options

I can click OK and it will prompt me to restart the translator service. Can I assume everything is ok or is there a test to see if the service is correctly configured?

RE: Using WMI to force the SCCM Agent to check for its AMT Auto Provisioning Policy

miroyer — Wed, 01 Oct 2008 14:52:07 GMT

This is defiantly a good find Bill. The SendSched.vbs can be used in a variety of different ways.

For example, you could enumerate a sccm collection and execute SendSched against each client in that collection.

~~Code vbscript Begin~~
Const SMSSITECODE = "VPD" 'SMS Site Code
Const SMSSERVER = "SCCMSP1.vprodemo.com" 'SMS Site Server
Const SMSCollection = "SMS00001" 'SMS Collection ID to enumerate clients from

Set objLocation = CreateObject("WbemScripting.SWbemLocator")
Set WbemServices = objLocation.ConnectServer(SMSSERVER, "root\SMS\site_" & SMSSITECODE)
Set colMembers = wbemServices.ExecQuery("Select * From SMS_FullCollectionMembership WHERE COllectionID='" & SMSCollection & "'")
Set wshShell = WScript.CreateObject("WSCript.shell")

For Each colMember in colMembers
runScript = "cscript sendsched.vbs {00000000-0000-0000-0000-0000 00000120} " & colMember.name
set oExec = wshShell.Exec(runScript)
Do While oExec.Status = 0
WScript.Sleep 1000
Loop
Next

Set wshShell = Nothing
Set WbemServices = Nothing
Set objLocation = Nothing
~~Code End~~

Another option may be to create an sccm advertisement to execute the SendSched locally on the client. Just set up a Command Line Task Sequence using cscript sendsched.vbs {00000000-0000-0000-0000-0000 00000120} and advertise that task sequence to a particular collection.

--Matt Royer

RE: Intel WS-MAN Translator 1.0 released

william.gregoire — Wed, 01 Oct 2008 07:48:11 GMT

I mean, the key is now correctly imported without error message, but selfsignedfix.vbs still does not connect.

RE: Intel WS-MAN Translator 1.0 released

william.gregoire — Wed, 01 Oct 2008 07:46:29 GMT

Thanks, that worked!

RE: Intel AMT 3.2.1 Self-signed certificate issue and working around it for Microsoft System Configuration Manager SP1

miroyer — Wed, 01 Oct 2008 01:29:21 GMT

Billc,

Yes, this guide is appropriate if you are running AMT in enterprise mode. Please note that SCCM SP1 only supports enterprise mode provisioning in a TLS configuration. Configuring in SMB mode and unprovisioning is just the alternate way of regenerating a new self signed certificate beside running this remote provision / unprovision script.

--Matt Royer

RE: Intel WS-MAN Translator 1.0 released

miroyer — Wed, 01 Oct 2008 01:24:36 GMT

The "the given key was not present in the dictionary" error when configuring the Intel WS-MAN Translator is usually related to the private key not being in the exported certificate. When you export the certificate, you need to ensure that you export the private key and also include the certificate chain.

--Matt Royer

RE: vPro Machines stuck in "Detected" State?

josh.hilliker — Mon, 22 Sep 2008 13:35:30 GMT

Bill,

Absolutely. I would download Matt's guide, then go through the 3 main steps, you will see the boxes move from detected to provisioned. if any questions either blog me back here or on Matt's post.

Josh H

RE: vPro Machines stuck in "Detected" State?

billc — Mon, 22 Sep 2008 12:02:16 GMT

I have similar issue on provisioning. SCCM SP1 indicate the AMT status is detected or unprovisioned, but my AMT is enterprise PKI model. May I use your guide to provision it? Is it AMT bugs or SCCM bugs?

Thanks!
Bill

RE: Intel AMT 3.2.1 Self-signed certificate issue and working around it for Microsoft System Configuration Manager SP1

billc — Mon, 22 Sep 2008 09:57:22 GMT

I have similar issue on provision and SCCM shows it's detected status, but the AMT model is enterprise. Is the guide useful for my case if I run AMT is enterprise model?

bill

RE: Intel WS-MAN Translator 1.0 released

william.gregoire — Sun, 21 Sep 2008 20:14:33 GMT

No, this is still an open issue for me.

Regading the problem "the given key was not present in the dictionary" I was told o to use the option to export the certificate with the root keys, at the time to make the PFX file. I have had the chance to try it yet (since I´m away from the project). Would you try that and tell?