topic Re: Re:Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last erro in Intel vPro® Platform

Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error: 0"

Jools86 — Thu, 01 Dec 2022 11:53:49 GMT

I am seeing the error on the EMAAgent log for a machine that has just had EMA Agent installed:

"Packet is not encrypted correctly or uses an old key. Last error: 0"

Our installation process is as follows:

Install IME drivers + Configure LMS service to Automatic
Reboot
De-Provision AMT (if provisioned)
Reboot
Install EMA Agent
- Then we sometimes see the error.

"Packet is not encrypted correctly or uses an old key. Last error: 0"

We haven't fully deployed EMA to our estate, but the fact I saw this error during my testing is worrying me.

Why exactly does this error happen? If AMT is de-provisioned this error makes sense as the AMT chip should be welcoming the EMA provisioning???

Re: Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error:

Jools86 — Thu, 01 Dec 2022 13:39:44 GMT

Here is an example.

As you can see - AMT is de-provisioned:

But EMA struggles to provision.

Re:Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error: 0"

JoseH_Intel — Fri, 02 Dec 2022 00:52:05 GMT

Hello Jools86,

Welcome back to the Intel community.

You say this is somehow a random error not happening on all the provisioned systems.

Can you tell what is the version of AMT running on the systems where you see this particular error?

Are you using a provisioning certificate? Which provider?

Jose A.

Intel Customer Support Technician

Re: Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error:

Jools86 — Fri, 02 Dec 2022 09:18:28 GMT

HI Jose,

I got past this error (dont know how), but machine not provisioning https://community.intel.com/t5/Intel-vPro-Platform/AMT-provisioning-keeps-failing/td-p/1434923, so something wrong with AMT on device.

We are using a DigiCert certificate (which is unchanged and provisions other machines) and have successfully provisioned this machine before

The AMT version of the machine is: 12.0.90.2072:

Please see my other post (for where I am now) https://community.intel.com/t5/Intel-vPro-Platform/AMT-provisioning-keeps-failing/td-p/1434923 for where I am now with this machine, after resetting AMT chip in BIOS multiple times.

Regards,

Julian

Re:Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error: 0"

SergioS_Intel — Sat, 03 Dec 2022 04:58:26 GMT

Hello Jools86,

We will continue working on the provisioning issue under this thread.

Can you please let us know if you are getting any error messages?

Are you getting this issue on several systems? if so how many?

Can you please confirm what EMA version are you running?

We will be looking forward to your updates.

Best regards,

Sergio S.

Intel Customer Support Technician

Re: Re:Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last erro

Jools86 — Sat, 03 Dec 2022 14:17:54 GMT

Can you please let us know if you are getting any error messages?

The ones I have screenshotted in this forum

Are you getting this issue on several systems? if so how many?

Just 1 PC

Can you please confirm what EMA version are you running?

Re:Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error: 0"

JoseH_Intel — Mon, 05 Dec 2022 04:04:04 GMT

Hello Jools86,

There is a newer version of EMA available to download. Version 1.9 could be worth trying

https://www.intel.com/content/www/us/en/download/19449/intel-endpoint-management-assistant-intel-ema.html

Could you confirm if this system is a Dell Precision 3630 Tower? Did it provision successfully before? Have you performed any recent changes in this system like updating BIOS, hardware changes, OS reimaging?

Regards

Jose A.

Intel Customer Support Technician

Re: Re:Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last erro

Jools86 — Mon, 05 Dec 2022 12:26:59 GMT

Thanks Jose, I will try it. This looks interesting:

Re:Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error: 0"

JoseH_Intel — Fri, 09 Dec 2022 04:48:02 GMT

Hello Jools86,

I am just following up to double-check if you were able to get some progress with the EMA v1.9 installation. Otherwise let us know if you require more time to accomplish this.

Regards

Jose A.

Intel Customer Support Technician

Re:Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error: 0"

JoseH_Intel — Wed, 14 Dec 2022 05:19:58 GMT

Hello Jools86,

We will proceed to mark this thread as closed. If you have further issues or questions just go ahead and submit a new topic.

Regards

Jose A.

Intel Customer Support Technician

Re: Re:Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last erro

Jools86 — Thu, 15 Dec 2022 18:00:32 GMT

I managed to successfully upgrade to Intel EMA 1.9. All machines provisioning fine, but this problem machine still has the same error:

Re: Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error:

Jools86 — Wed, 21 Dec 2022 10:11:07 GMT

Hi all,

If anyone else gets this issue, I managed to fix it.

Open up PC - Pull out CMOS battery (it was a DELL precision 3630)
Wait 20 minutes
Go into MEBx (BIOS) set new default password
Turn machine on
Machine then successfully provisioned AMT agent

Re: Intel EMA Provisioning: "Packet is not encrypted correctly or uses an old key. Last error:

YasserA — Tue, 14 Mar 2023 16:23:19 GMT

Surely this is not feasible for Optiplex AIO machines? we can't just pull out the CMOS battery of hundreds of AIO computers - is there another method? There must be - surely?