some little questions about your setup.
What Version of the Intel SCS Tool are you using?
Do you use a selfsigned certificate for the Provisioning server or a go daddy or verisign?
Does the Account, you are trying to provision with, have local admin rights?
And last but not least SCCM 2012 or 2012 R2?
We got the provisioning via Tasksequenz running after some problems.
Basically we use an exported Provisioning XML and an altered Configuration.bat that runs under the Service account we use to run the SCSServer-Service.
If you like a detailed explanation, please let me know.
they are using Intel SCS 11 - it is visible in the log by "ACUConfig 18.104.22.168"
and it is Host Based Configuration attempt - you can spot it from using Configure.bat with .XML file (AMT settings are there \AvantgardeLabAMTProfile.xml" and "***** Start ClientControlConfiguration ******"
your system is already configured in Admin Control mode - see in the log "Current Control Mode: 2 (Admin)"
Probably it was configured manually (via MEBx interface, or USB local configuration).
and you are attempting to change (re-configure) AMT configuration using Host Based Configuration method from settings in XML file.
In Admin Control Mode changes to AMT settings require authentication to AMT with digest or Kerberos credentials of AMT administrator account.
If Client Control Mode (with mandatory User Consent Code usage) is your aim - I suggest to fully unprovision AMT from BIOS or by disconnecting CMOS RTC battery or from MEBx (if you know MEBx Password configured previously).
Then re-run task sequence and it shall work fine.
But if your aim is to keep Admin Control Mode and just reload other AMT settings you have to either:
- make account running ACUConfig.exe (with SCCM task sequence it is Computer Account) the AMT Kerberos administrator first (not possible with manual/USB configuration used to get into Admin Control mode)
- modify Configure.bat to add Current AMT digest administrator password by adding /AdminPassword <current AMT admin password> at the end of ACUConfig command.
Current AMT admin password in case of manual MEBx/USB configuration is new MEBx password that has been configured via MEBx or creating USB setup.bin file.
For improved security I also suggest to define new AMT digest administrator password in XML profile file -MEBx/USB defined one will be replaced with this password.
I suggest to create duplicate of Configure.bat and duplicate of task sequence.
Anyway having RCS service runinng and doing all configuration is much more elegant way to manage AMT settings.
Intel EMEA Biz Client Solution Architect