Up to Discussions in Ask An Expert

This Question is Not Answered

1 "correct" answer available (4 pts) 1 "helpful" answer available (2 pts)
8 Replies Last post: Jul 28, 2008 3:01 AM by vinayramkumar
Reply

Cannot access WEB GUI with SCCM SP1 and AMT Firmware 3.2.1

Jul 11, 2008 9:33 AM

Click to view vinayramkumar's profile vinayramkumar 11 posts since
Jul 8, 2008

Hi guys

After trawling through this forum and many others, I have finally managed to get vPro clients to succesfully provision using Zero Touch configuration. The OOB console in SCCM SP1 works fine... and all the PCs wake up correctly when a program is advertised. However, I cannot access the web gui on any of the PCs using Internet Explorer 7 or 6 with hotfix. I have checked all network settings, all hostnames resolve correctly. I have checked and double checked the passwords in the Out of Band management configuration settings.

I can still get into the ME interface in the BIOS using the same password.

Average User Rating
(0 ratings)
Click to view miroyer's profile miroyer 104 posts since
Aug 31, 2007
Reply 1. Re: Cannot access WEB GUI with SCCM SP1 and AMT Firmware 3.2.1 Jul 11, 2008 9:53 AM

Are you trying to login with the admin account or a Kerberos users? Please keep in mind that SCCM during the provisioning process scrambles the remote admin password and is not the MEBx password you originally set in the Component Configuration -> Out of Band Management. You will need to log into the web UI using a Kerberos (active directory) account that has sufficient permissions. You can configure users through Component Configuration -> Out of Band Management -> AMT User Account tab.

I'm assuming if you are being presented a Web Logon prompt, you already have the "Enable WebUI" checked in Component Configuration -> Out of Band Management -> AMT Setting Tab.

http://technet.microsoft.com/en-us/library/cc161889(TechNet.10).aspx
http://technet.microsoft.com/en-us/library/cc161817(TechNet.10).aspx

--Matt Royer

Click to view vinayramkumar's profile vinayramkumar 11 posts since
Jul 8, 2008
Reply 2. Re: Cannot access WEB GUI with SCCM SP1 and AMT Firmware 3.2.1 Jul 11, 2008 6:26 PM
in response to: miroyer

Hi Matt

Yes.. the Web UI tickbox is checked, and I've tried logging on ot the web ui using both the admin account (which you just confirmed will not work), as well as active directory users. I am trying to log on with my (domain admin) account, which is explicitly listed in the AMT Users section with all permissions. I've made sure I've updated the provisioning settings in management controller memory for all PCs in my vPro collection... still no luck.

Click to view miroyer's profile miroyer 104 posts since
Aug 31, 2007
Reply 3. Re: Cannot access WEB GUI with SCCM SP1 and AMT Firmware 3.2.1 Jul 11, 2008 7:07 PM
in response to: vinayramkumar

Assuming you are able to access the vPro client from SCCM (Collection Power control, Out Of Band Console)?

Are you accessing the web GUI from a different machine other than the SCCM server? If so do you have the certificate of the Root CA that is used for AMT Certificate provisioning in your trusted certificate store?


--Matt Royer

Click to view vinayramkumar's profile vinayramkumar 11 posts since
Jul 8, 2008
Reply 4. Re: Cannot access WEB GUI with SCCM SP1 and AMT Firmware 3.2.1 Jul 13, 2008 10:38 AM
in response to: miroyer
The out of band console works fine.. all functions OK. Ive tried accessing the web ui from the SCCM server as well as other workstations that trust the root certificate... still no joy.
Click to view vinayramkumar's profile vinayramkumar 11 posts since
Jul 8, 2008
Reply 5. Re: Cannot access WEB GUI with SCCM SP1 and AMT Firmware 3.2.1 Jul 25, 2008 11:05 AM
in response to: miroyer

any ideas?
Click to view miroyer's profile miroyer 104 posts since
Aug 31, 2007
Reply 6. Re: Cannot access WEB GUI with SCCM SP1 and AMT Firmware 3.2.1 Jul 26, 2008 12:57 AM
in response to: vinayramkumar

Well if you are logging in with a known configured domain account (that has been confirmed to have proper amt realm permissions) and that same user works when you connect via OOBC (you are logged on with that users), the issue is most likely your internet explore configuration. I believe you mentioned that you have you tried on both IE7 and IE6 with the HotFix without luck (assuming you added the register entry as well associated to the hotfix)... In your internet explore options advance settings, is "Enable Integrated Windows Authentication" checked or unchecked? When presented with login screen, you are providing the username with the domain (domain\user) in the user field of the logon prompt?


--Matt Royer

Click to view Trevor.Sullivan's profile Trevor.Sullivan 4 posts since
Jul 25, 2008
Reply 7. Re: Cannot access WEB GUI with SCCM SP1 and AMT Firmware 3.2.1 Jul 26, 2008 12:12 PM
in response to: miroyer

Matt,

In follow up to your post about Internet Explorer configuration, perhaps the best method of reconfiguring it would be to add the computer, or your entire domain possible, to your Intranet security zone. The Intranet security zone, by default, has Windows Integrated Authentication enabled.

I also thought I'd chime in that I couldn't log in to the web interface with my domain account after provisioning. It wasn't a big deal to me, so I ignored it at that point, but I'm curious to see the outcome here.

Trevor Sullivan
Systems Engineer

Click to view vinayramkumar's profile vinayramkumar 11 posts since
Jul 8, 2008
Reply 8. Re: Cannot access WEB GUI with SCCM SP1 and AMT Firmware 3.2.1 Jul 28, 2008 7:49 AM
in response to: Trevor.Sullivan

Ah! Finally.. someone else who's experienced the same issue. I thought I'd done something wrong during the setup!

I've just tried adding one AMT pc, and then the whole internal domain explicitly to the Local Intranet zone, and this still hasnt helped. Integrated authentication was always turned on... I did turn it off temporarily to see if the "admin" account could be used to log on, then I was told that SCCM scrambles the password for that account during provisioning.

Suggestions welcome!

Actions

More Like This