topic Re: Redirection Exception in Intel® Business Client Software Development

Redirection Exception

jacace — Thu, 30 Oct 2008 14:42:05 GMT

Hi there,

I'm trying to use SOL/IDE-R in an Enterprise provisioned machine with TLS enabled (basic, not mutual) and I'm getting a Exception.

I'm able to see the asset information and to power up/down the machine (with EOI, NOT WsMan), but SOL/IDE-R does not work, so I'm sure it's not an access issue (cause the machine security certificate is added is the client trusted root certificate store and the user being used is admin).

The method which one returns the error is (AmtRedirectorWrapper.cs line 617):
r = IMR_SOLOpenTCPSession(clientId, login, data, IntPtr.Zero);

An the error is in r = IMRResult.IMR_RES_SOCKET_ERROR

Help!

Javier Andrs Cceres Alvis

Re: Redirection Exception

Jerome_E_Intel — Thu, 30 Oct 2008 18:19:08 GMT

Usually this means some sort of connectivity error. Also, possibly due to certificate verification issues. Check to make sure you've set the value ClientInfo.ip to be the same as the CN of the AMT certificate. Also,check the value ofStorage_Enabled in your ini file (is it 0?).

-Jerome

Re: Redirection Exception

jacace — Mon, 10 Nov 2008 16:33:51 GMT

Quoting - Jerome Esteban (Intel)

Hello Jerome,

Sorry for delay.

The CN ofAMT certificate shows the machine FQDN, while the hostname is resolved as the same IP so when I try to connect with DTK Commander I can do it but shows me warnings and Remote control is disabled.

The problem is that SCS Console makes those certificates so I can not change the FQDN to use IP address; I also was trying to get the FQDN from machine but aways returns me the IP address instead.

Thanks a lot,

Javier Andrs Cceres Alvis

Re: Redirection Exception

jacace — Mon, 10 Nov 2008 19:44:08 GMT

Hello Jerome,

I forgot to mention inprevius post thatI did not have a imrsdk.ini file, but now I have one I copied from abin DTK directory.

In this file the parameter is : Storage_Enabled=0 but I have a question, What does this parameter do?

By other hand, Is it possible to handle the certificate authentication process?

Thanks a lot,

Javier Andrs Cceres Alvis

Re: Redirection Exception

jacace — Mon, 10 Nov 2008 20:45:10 GMT

Hello Jerome,

I have more feedback:

I did a test with bad results; I manually change the RedirectorWrapper IP parameter to Machine FQDN to be the same as certificate CN but I got the same error (RedirectorWrapper.IMRResult.IMR_RES_SOCKET_ERROR), so I do not think this is the reason.

Thanks a lot,

Javier Andrs Cceres Alvis

Re: Redirection Exception

jacace — Wed, 12 Nov 2008 00:23:43 GMT

Hello there,

I'm still getting the error. Any help is welcome

Javier Andrs Cceres Alvis

Re: Redirection Exception

Gael_H_Intel — Wed, 12 Nov 2008 21:53:11 GMT

Hi Javier,

Can you also verify that the listener is active? I think you can use the Redirection samplein the bin directory to look at the current redirection settings.

Also, so that we can help you better could you send over your FW version, DTK code version, SDK version (5?)

Thanks

Re: Redirection Exception

jacace — Thu, 13 Nov 2008 15:33:12 GMT

Quoting - Gael Holmes (Intel)

Hi Javier,

Can you also verify that the listener is active? I think you can use the Redirection samplein the bin directory to look at the current redirection settings.

Also, so that we can help you better could you send over your FW version, DTK code version, SDK version (5?)

Thanks

Hi Gael,

I verified listener is active.

I'm trying to use the RemoteControl.exe in many ways but I think I'm doing something wrong, can you pleasecheck this sintax:

RedirectionConfig.exe -g -user admin -pass PB4e

Re: Redirection Exception

Sreelekshm_S_Intel — Thu, 13 Nov 2008 21:52:53 GMT

Quoting - javierandrescaceres@gmail.com

Hi Gael,

I verified listener is active.

I'm trying to use the RemoteControl.exe in many ways but I think I'm doing something wrong, can you pleasecheck this sintax:

RedirectionConfig.exe -g -user admin -pass PB4e

Re: Redirection Exception

Andrew_S_Intel2 — Thu, 13 Nov 2008 22:22:17 GMT

Javier,

For the two examples you gave, I'm pretty sure the error on the second is due to not having the name and password.

But for the first, if you used:

RedirectionConfig.exe -g -user admin -pass PB4e

Re: Redirection Exception

jacace — Fri, 14 Nov 2008 14:10:14 GMT

Quoting - Andrew Schiestl (Intel)

Javier,

For the two examples you gave, I'm pretty sure the error on the second is due to not having the name and password.

But for the first, if you used:

RedirectionConfig.exe -g -user admin -pass PB4e

Re: Redirection Exception

Sreelekshm_S_Intel — Fri, 14 Nov 2008 23:14:36 GMT

Hi,

Coming back to my previous question - have you tried sdk 5.0?

Thanks,

Sree

Re: Redirection Exception

jacace — Tue, 18 Nov 2008 14:23:24 GMT

Quoting - Sreelekshmy Syamalakumari (Intel)

Hi,

Coming back to my previous question - have you tried sdk 5.0?

Thanks,

Sree

Hello Sree,

I updated to SDK 5.0 but I'm still getting the same Exception.

Thanks,

Javier Andrs Cceres Alvis

Re: Redirection Exception

RBens2 — Tue, 18 Nov 2008 14:34:17 GMT

Hi Javier,

You can't use an IP address with TLS. The TLS needs to use the certificate for authentication, but the IP address doesn't match the name on the cert, so the connection fails. To use TLS you have to use an FQDN, that way the lookup on the cert will match the name on the request.

Regards,

Roger

Re: Redirection Exception

jacace — Tue, 18 Nov 2008 14:56:00 GMT

Quoting - rogerb

Hi Javier,

You can't use an IP address with TLS. The TLS needs to use the certificate for authentication, but the IP address doesn't match the name on the cert, so the connection fails. To use TLS you have to use an FQDN, that way the lookup on the cert will match the name on the request.

Regards,

Roger

Hello Roger,

I switch to:

RedirectionConfig.exe -g -user admin -pass >i;U3Ho$ http://LINTVPRO-PC.AMT.LOCAL:16993/RedirectionService

And I can see something like a log file in the bin directory with this text:

Calling function GetRedirectionListenerState...
Error: failed while calling GetRedirectionListenerState
SOAP failure: error code = 25

Thanks a lot,

Javier Andrs

Re: Redirection Exception

jacace — Wed, 19 Nov 2008 13:23:02 GMT

Hi there,

Any help?

Thanks a lot,

Javier Andrs Cceres Alvis

Re: Redirection Exception

RBens2 — Wed, 19 Nov 2008 15:02:46 GMT

Hi Javier,

As was said earlier, the protocol type and the port number have to match: http with 16992, and https with 16993. In your code, you show http with 16993, this will not work. Please try the code again with the corrrect protocol type.

Regards,

Roger

Re: Redirection Exception

jacace — Wed, 19 Nov 2008 15:20:23 GMT

Quoting - rogerb

Hi Javier,

As was said earlier, the protocol type and the port number have to match: http with 16992, and https with 16993. In your code, you show http with 16993, this will not work. Please try the code again with the corrrect protocol type.

Regards,

Roger

Hello Roger,

It was a typing mistake, I have tried with HTTPS with the same results.

Thanks a lot,

Javier Andrs Cceres Alvis

Re: Redirection Exception

Andrew_S_Intel2 — Wed, 19 Nov 2008 23:06:39 GMT

Quoting - javierandrescaceres@gmail.com

Hello Roger,

It was a typing mistake, I have tried with HTTPS with the same results.

Thanks a lot,

Javier Andrs Cceres Alvis

I think the issue hereand the issue you raised in the other thread you started today (the SCS mutual authentication error) are both related to a certificate issue that's keeping the SDK example code or your code from being able to connect to the AMT system correctly. I'm looking more into how to try to resolve this, since setting up the certificates can be somewhat involved, especially in the mutual authentication case.

Andy

Re: Redirection Exception

jacace — Thu, 20 Nov 2008 15:58:18 GMT

Quoting - Andrew Schiestl (Intel)

Hello Andy,

Me too. I think both errors are related.
The certificate creation process is simple: my server is running Windows 2003 with the certificate authority services.
This authority issues all certificates in my enviroment (I mean, the ones used by the IIS, by SCS and by my Windows client application).
I googled it but the reasons why this error happens are verified or do not apply to my scenario (for example, this also happens when the client application is web and then the problem is about file permissions).

I have tried to connect to AMT machine with the DTK utilities but they raise the same exception.

Thanks a lot Andy,

Javier Andrs Cceres alvis