topic Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA in Intel vPro® Platform

Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

AndrewChan — Tue, 27 Aug 2024 09:29:22 GMT

after successfully provision the desktop computer in Intel EMA, the next target is to management laptops that have WiFi only.

So when the laptops are in office, they connect to the Corporation WiFi which uses 802.1x authentication through certificate.

I've created 802.1x profile, entering a dedicated AD OU to create objects to consume the certificate, then I created a new AMT profile that uses it.

After installing the agent along with the new configuration file. it stays on Intel® AMT setup status: Pending Configuration

While looking into the log files

The manageability server log had an error

"Add computer to organization unit in Active Directory failed. Error = Access is denied."

The question is, how do I control which account is used when putting objects into the OU (which configured on the 802.1x profiles)

Thanks

Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

Arun_Intel1 — Tue, 27 Aug 2024 20:29:06 GMT

Hi AndrewChan,

Greetings!

Before we proceed, please share the environmental details asked below, for us to analyze and share our findings:

EMA Version

AMT Version

Number of Endpoints

BIOS version

OS on the server and on the Endpoints

ACM or CCM mode

Endpoint model

And please specify the Error that you are getting in the Manageability server logs

Best Regards

Arun_Intel

Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

Arun_Intel1 — Fri, 30 Aug 2024 23:48:00 GMT

Hi AndrewChan,

Greetings!

This is the first follow up, please share the environmental details asked.

Best Regards

Arun_Intel

Re: Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

AndrewChan — Mon, 02 Sep 2024 07:37:06 GMT

EMA 1.13.1.0

AMT 15.x

Number of Endpoints :1 (in its respective Endpoint Group)

BIOS Version (Lenovo X1 Carbon Yoga Gen 6 BIOS 1.69)

OS server running on WIndows 10 22H2 (it's a PoC)

ACM

Endpoint (Lenovo X1 Carbon Yoga Gen 6 )

Logs attached.

The specified error was "Add computer to organization unit in Active Directory failed. Error = Access is denied." which I think it is caused by the credential being used had insufficient permission, and thus my question : How may I manage the credential being used to create objects in AD OUs?

Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

vij1 — Mon, 02 Sep 2024 22:15:30 GMT

Hello AndrewChan,

Greetings!

Please note that Intel® Endpoint Management Assistant (EMA) must be installed on either Windows Server 2019 or Windows Server 2022. These are the only supported operating systems for the installation of EMA.

If you have any questions or need further assistance, feel free to reach out.

Best regards,

Vijay N.

Re: Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

AndrewChan — Wed, 04 Sep 2024 08:06:22 GMT

Hello,

I've spend the last few days installing the EMA on a Windows Server now and still giving out same error, basically cannot create objects in AD. So:

What credential was used to access the AD? and
how may I modify this credential?

Thanks

Andrew

Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

Arun_Intel1 — Wed, 04 Sep 2024 17:21:58 GMT

Hi Andrewchan,

Greetings!

We see that you have got the same error even after installing the Windows server OS, kindly confirm which version of the server OS has been in installed (windows server 2022 or 2019)

And please share the error screen shot that you are getting and the latest Swarm and the Manageability logs as well for us to further analyze.

Best Regards

Arun_Intel

Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

vij1 — Fri, 06 Sep 2024 22:58:15 GMT

Hello Andrewchan,

Greetings for the day!

We are following up to find out if you were able to find the information we provided. Please reply to confirm, so we can continue helping on a resolution. Looking forward to receiving your reply.

Regards,

Vijay N

Re: Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

AndrewChan — Mon, 09 Sep 2024 06:05:47 GMT

I've added the server account to the OU's security and allowed it to create objects, now the "Add computer to organization unit in Active Directory failed. Error = Access is denied" error gone.

Thanks.

Re:Provisioning AMT clients using WiFi with 802.1x authentication in Intel EMA

Arun_Intel1 — Mon, 09 Sep 2024 22:20:45 GMT

Hello AndrewChan,

Greetings!

We are glad to hear that the issue has been resolved.

Please feel free to contact us for any further assistance, we are more than happy to assist you.

Best Regards,

Arun_Intel