1 Reply Latest reply on Feb 21, 2014 10:44 AM by IT Center

    Issues with provisioning AMT in SCCM 2012 R2 - systems previously provisioned in SCCM 2007 R2

    Chris_R

      ningintelHi - running into issues with reprovisioning some systems for Out of Band in SCCM 2012 R2 that were previously provisioned in SCCM 2007 R2.  I ran through the process of unprovisioning the systems in SCCM 2007 before migrating my systems to the new infrastructure as per migration documents from Microsoft.

       

      I was able to provision some systems (currently working with 53 systems while I work out the issues), and have the following numbers:

       

      16 - detected vpro clients

      13 - provisioned vpro clients

      24 - unsupported vpro clients

      The fact that I have 13 provisioned that would lead me to believe that my certificates and environment are set up properly and points me to system specific issue.  The 13 provisioned systems where provisioned in our old environment as well.

       

      Here is the log from the AMTOPMGR.LOG file when using the "Discover AMT Status" - I've removed the IP address and full system names from the log.

       

      AMT Discovery Worker: Wakes up to process instruction files SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Wait 3600 seconds... SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Wakes up to process instruction files SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Reading Discovery Instruction E:\Program Files\Microsoft Configuration Manager\inboxes\amtopmgr.box\disc\{1DE76692-74CE-48D3-8D80-4CE5828FB3C3}.RDC... SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>set quoted_identifier on;set ansi_warnings on;set ansi_padding on;set ansi_nulls on;set concat_null_yields_null on;set arithabort on;set numeric_roundabort off;set DATEFORMAT mdy; SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Execute query exec AMT_GetThisSitesNetBiosNames NULL, '16779993', 'MNC' SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>exec AMT_GetThisSitesNetBiosNames NULL, '16779993', 'MNC' SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: CSMSAMTDiscoveryWorker::RetrieveInfoFromResource - Found machine <computername> (<fqdn>), ID: 16779993 IP: <ipaddress> from Resource 16779993. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>set quoted_identifier on;set ansi_warnings on;set ansi_padding on;set ansi_nulls on;set concat_null_yields_null on;set arithabort on;set numeric_roundabort off;set DATEFORMAT mdy; SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Execute query exec AMT_GetAMTMachineProperties 16779993 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>exec AMT_GetAMTMachineProperties 16779993 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      Discovery will use ip resolved from netbios: SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      <ipaddress> SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>set quoted_identifier on;set ansi_warnings on;set ansi_padding on;set ansi_nulls on;set concat_null_yields_null on;set arithabort on;set numeric_roundabort off;set DATEFORMAT mdy; SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Execute query exec AMT_GetProvAccounts SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>exec AMT_GetProvAccounts SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Finish reading discovery instruction E:\Program Files\Microsoft Configuration Manager\inboxes\amtopmgr.box\disc\{1DE76692-74CE-48D3-8D80-4CE5828FB3C3}.RDC SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Parsed 1 instruction files SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Send task <fqdn> to completion port SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      General Worker Thread Pool: Current size of the thread pool is 1 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      General Worker Thread Pool: Work thread 10684 started SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Discover <computername> using IP address <ipaddress> SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoPingDiscoveryForAMTDevice succeeded. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      AMT Discovery Worker: 1 task(s) are sent to the task pool successfully. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>set quoted_identifier on;set ansi_warnings on;set ansi_padding on;set ansi_nulls on;set concat_null_yields_null on;set arithabort on;set numeric_roundabort off;set DATEFORMAT mdy; SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>SELECT SC.SiteType FROM SMSData S INNER JOIN SC_SiteDefinition SC ON SC.SiteCode = S.ThisSiteCode SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>set quoted_identifier on;set ansi_warnings on;set ansi_padding on;set ansi_nulls on;set concat_null_yields_null on;set arithabort on;set numeric_roundabort off;set DATEFORMAT mdy; SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>SELECT dbo.fnIsSnapshotInitializing(N'Site Control Data', N'') SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>set quoted_identifier on;set ansi_warnings on;set ansi_padding on;set ansi_nulls on;set concat_null_yields_null on;set arithabort on;set numeric_roundabort off;set DATEFORMAT mdy; SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>select DateLastModified from SiteControl where SiteCode = N'MNC' SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      SQL>>>>> Done. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      STATMSG: ID=7203 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_AMT_OPERATION_MANAGER" SYS=<sccmfqdn> SITE=MNC PID=2964 TID=6520 GMTDATE=Thu Feb 13 14:30:10.716 2014 ISTR0="1" ISTR1="0" ISTR2="0" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: There are 1 tasks in pending list SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Wait 20 seconds... SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Wakes up to process instruction files SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: There are 1 tasks in pending list SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      AMT Discovery Worker: Wait 20 seconds... SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      Error 0x80090304 returned by InitializeSecurityContext during follow up TLS handshaking with server. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      **** Error 0x3aa5ad60 returned by ApplyControlToken SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoSoapDiscovery failed with user name: admin. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Error 0x80090304 returned by InitializeSecurityContext during follow up TLS handshaking with server. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      **** Error 0x3aa5ad60 returned by ApplyControlToken SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoSoapDiscovery failed with user name: admin. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Flag iWSManFlagSkipRevocationCheck is set. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      session params : https://<fqdn>:16993   ,  2011001 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      ERROR: Invoke(get) failed: 80020009argNum = 0 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Description: The I/O operation has been aborted because of either a thread exit or an application request. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Error: Failed to get AMT_SetupAndConfigurationService instance. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoWSManDiscovery failed with user name: admin. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Flag iWSManFlagSkipRevocationCheck is set. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      session params : https://<fqdn>:16993   ,  2011001 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      ERROR: Invoke(get) failed: 80020009argNum = 0 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Description: The I/O operation has been aborted because of either a thread exit or an application request. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Error: Failed to get AMT_SetupAndConfigurationService instance. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoWSManDiscovery failed with user name: admin. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Start Kerberos Discovery SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Flag iWSManFlagSkipRevocationCheck is set. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      session params : https://<fqdn>:16993   ,  2484001 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      ERROR: Invoke(get) failed: 80020009argNum = 0 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Description: The I/O operation has been aborted because of either a thread exit or an application request. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Error: Failed to get AMT_SetupAndConfigurationService instance. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoKerberosWSManDiscovery failed. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Flag iWSManFlagSkipRevocationCheck is set. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      session params : https://<ipaddress>:16993   ,  2015001 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      ERROR: Invoke(get) failed: 80020009argNum = 0 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Description: The I/O operation has been aborted because of either a thread exit or an application request. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Error: Failed to get AMT_SetupAndConfigurationService instance. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoWSManDiscovery failed with user name: admin. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Flag iWSManFlagSkipRevocationCheck is set. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      session params : https://<ipaddress>:16993   ,  2015001 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      ERROR: Invoke(get) failed: 80020009argNum = 0 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      Description: The I/O operation has been aborted because of either a thread exit or an application request. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      Error: Failed to get AMT_SetupAndConfigurationService instance. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      DoWSManDiscovery failed with user name: admin. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      Discovery to IP address <ipaddress> succeed. AMT status is 1. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      CSMSAMTDiscoveryTask::Execute, discovery to <computername> succeed. AMT status is 1. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      CSMSAMTDiscoveryTask::Execute - DDR written to E:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      CStateMsgReporter::DeliverMessages - Queued message: TT=1201 TIDT=0 TID='Unspecified' SID=10 MUF=0 PCNT=1, P1='<fqdn>' P2='' P3='' P4='' P5='' SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      CStateMsgReporter::DeliverMessages - Created state message file: E:\Program Files\Microsoft Configuration Manager\inboxes\auth\statesys.box\incoming\zj7ir1r4.SMX SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      General Worker Thread Pool: Succeed to run the task <fqdn>. Remove it from task list. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      General Worker Thread Pool: Work thread 10684 has been requested to shut down. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

      General Worker Thread Pool: Work thread 10684 exiting. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:11 AM 10684 (0x29BC)

       

      Here are the pieces that stick out to me:

       

      AMT Discovery Worker: Wait 20 seconds... SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 6520 (0x1978)

      Error 0x80090304 returned by InitializeSecurityContext during follow up TLS handshaking with server. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      **** Error 0x3aa5ad60 returned by ApplyControlToken SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoSoapDiscovery failed with user name: admin. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Error 0x80090304 returned by InitializeSecurityContext during follow up TLS handshaking with server. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      **** Error 0x3aa5ad60 returned by ApplyControlToken SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoSoapDiscovery failed with user name: admin. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Flag iWSManFlagSkipRevocationCheck is set. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      session params : https://<fqdn>:16993   ,  2011001 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      ERROR: Invoke(get) failed: 80020009argNum = 0 SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Description: The I/O operation has been aborted because of either a thread exit or an application request. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Error: Failed to get AMT_SetupAndConfigurationService instance. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      DoWSManDiscovery failed with user name: admin. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

      Flag iWSManFlagSkipRevocationCheck is set. SMS_AMT_OPERATION_MANAGER 13/02/2014 10:30:10 AM 10684 (0x29BC)

       

      If I try to force a provision using a sendsched.vbs {00000000-0000-0000-0000-000000000120} to the system, OOBMGMT.LOG shows the following:

       

      ON SCHEDULE OOBMgmt 13/02/2014 10:35:00 AM 3972 (0x0F84)

      BEGIN oobmgmt 13/02/2014 10:35:00 AM 3972 (0x0F84)

      Retrying to activate the device. oobmgmt 13/02/2014 10:35:00 AM 3972 (0x0F84)

      Get CoreVersion: 5.2.50 oobmgmt 13/02/2014 10:35:00 AM 3972 (0x0F84)

      Resending last OTP oobmgmt 13/02/2014 10:35:00 AM 3972 (0x0F84)

      Successfully activated the device. oobmgmt 13/02/2014 10:35:00 AM 3972 (0x0F84)

      END oobmgmt 13/02/2014 10:35:00 AM 3972 (0x0F84)

       

      For this system I upgraded the MEBX firmware from 5.2.1 to 5.2.50, with no change - this however did correct the issue for a previous system (same model, MEBX firmware) and I do have other systems with this version of firmware provisioned.

       

      I also ran the Activator utility, and determined that the ports are open.

       

      Also ran the Diagnostic Utility, all scans and tests returned what I would expect.

       

      Have tried running the UnprovisionEx utility again, when I attempt to run with -tls I get "An exception occurred while atempting to unprovision (FULL) the system. The request was aborted: Could not create SSL/TLS secure channel".  When I drop -tls I get a refused connection to port 16992 and that the AMT device is invalid.

       

      Anybody have any ideas on what is happening?  I'm at a loss to understand why I can provision some, and some I can't.

       

      Thanks