ACUConfig doesn't behave as expected

[Rupert_H_]

- I have installed Linux version of ACUConfiug.
- I have created a simple profile with ACUWizard (in MS-Windows) to change power management settings.
This is my simple profile "profile.xml":

<Profile>
  <SCSVersion>7.1</SCSVersion>
  <Description>Power Management</Description>
  <PowerOptions>
      <PowerState>PowerStateS5</PowerState>
      <WakeOnNetAccessSleepTimer>3</WakeOnNetAccessSleepTimer>
  </PowerOptions>
</Profile>

- I have obviously installed MEI and LMS (and they works correctly).

Finally I have executed this command:

$ ACUConfig -Verbose -Output Console ConfigAMT profile.xml -DecryptionPassword my_profile_password

and obtained this output:

Starting log 2013-12-19 12:04:59
***** Start CheckAMT ******

Intel(R) AMT  in PROVISIONING_MODE_ENTERPRISE
***** Start FWUpdateData ******

***** END FWUpdateData ******

***** END CheckAMT ******

***** Start GetAmtFQDN ******

***** END GetAmtFQDN ******

Calling function Discovery...
Calling function GetLocalSystemAccount over MEI...
Function GetLocalSystemAccount over MEI ended successfully
Host Based Setup is supported
Current Control Mode: 2 (Admin)
Allowed Control Modes: 2 (Admin) and  1 (Client)
Function Discovery ended successfully
GetHostAndMEInfo output data:
    IsAMT:True,
    isAmtCapable:False,
    isEnterpriseMode:True,
    configurationMode:2,
    isRemoteConfigEnabled:True,
    AMTversion:8.0.10,
    isMobile:False,
    provisioningTlsMode:2,
    suuid:XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX,
    isClientConfigEnabled:True,
    hostBasedSupport:True,
    configurationState:2,
    FQDN:myhost.com.
myhost.com:Starting Unified configuration flow...
***** Start ClientControlConfiguration ******

Apparently no problem but when I check if the configuration took place (with OpenMDTK Commander Tool), I realize that the configuration has not taken place.

Same problem occurs with not encrypted and manually created profiles.

[Gael_H_Intel]

This is really odd.

It looks like you have an AMT8 client (but your output indicates that it is not AMT capable...)

What is your OEM/platform information (which processor do you have?)

And could you tell me which versions of the LMS software and MEI drivers you have?

Can you access the WebUI?  http://<ipaddress>:16992    (16993 if https)

[Rupert_H_]

- CPU: Intel(R) Xeon(R) CPU E3-1245 V2 @ 3.40GHz
- MB: Supermicro X9SAE
- OS: Ubuntu 12.04 LTS
- LMS version is 8.0.0-7
- MEI version is 7.1.20.1 (Kernel 3.2.0-57):
   $ modinfo mei | grep "^version"
   version:        7.1.20.1

Maybe LMS and MEI versions are incompatible? Because I seem to remember to have read (but I can't remember where) that LMS-vers.8 could require MEI-vers.8.
However this would be odd because all except ACUConfig seems to work correclty (OpenMDTK in virtualbox, WebUI from host OS, WSman).

I have tried to download also the oldest LMS version (7.1.20) from this page: http://software.intel.com/en-us/articles/download-the-latest-intel-amt-open-source-drivers but the download link is nomore working.

I have tested also a more recent kernel (3.5.0-44 ...this is the more recent kernel released with Ubuntu 12.04) and although here modinfo command doesn't return mei version, I have suspect this is the same version as above (7.1.20.1) because problem is not solved:

For information only, this command (kernel 3.5.0-44):

$ ACUConfig -verbose -output console status

returns the following ouput:

Starting log 2013-12-19 23:01:35
***** Start CheckAMT ******

Intel(R) AMT  in PROVISIONING_MODE_ENTERPRISE
***** Start FWUpdateData ******

***** END FWUpdateData ******

***** END CheckAMT ******

***** Start GetAmtFQDN ******

***** END GetAmtFQDN ******

Calling function Discovery...
Calling function GetLocalSystemAccount over MEI...
Function GetLocalSystemAccount over MEI ended successfully
Host Based Setup is supported
Current Control Mode: 2 (Admin)
Allowed Control Modes: 2 (Admin) and  1 (Client)
Function Discovery ended successfully
GetHostAndMEInfo output data:
    IsAMT:True,
    isAmtCapable:False,
    isEnterpriseMode:True,
    configurationMode:2,
    isRemoteConfigEnabled:True,
    AMTversion:8.0.10,
    isMobile:False,
    provisioningTlsMode:2,
    suuid:XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX,
    isClientConfigEnabled:True,
    hostBasedSupport:True,
    configurationState:2,
    FQDN:myhost.com.
myhost.com: Retrieving machine status...
***** Start DisplayAMTInfo ******

Host information- myhost.com
    UUID- XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
    Intel(R) AMT version- 8.0.10
    The system is configured in Admin Control mode.  
    The system TLS setup is using PKI.  
    The system supports host-based configuration.  
    AMT state- Post-Provision(2)
***** END DisplayAMTInfo ******

***********

Exit with code 0 - The requested operation completed successfully.

[Gael_H_Intel]

Hello,

I have forwarded your question to the SCS team.  Meanwhile, the links have been fixed for downloading the Open Source software.  Prior to AMT 9.5, we did not formally support Ubuntu (Redhat and SUSE only) so I do not know if this is an Ubunto issue.  It sounds, to me, like it has to do with the ACUConfig utility.

[Gael_H_Intel]

Hello Rupert,

We need for you to provide the log file for the ACUConfig session.  The log should let us know what happened during configuration.

To get the log, you will  need to run the following command:
ACUConfig -Verbose -Output Console -Output file .log ConfigAMT profile.xml -DecryptionPassword my_profile_password

If there is a failure with ACUConfig we can see it in the log file.

[Rupert_H_]

Here attached, my log file.

[Rupert_H_]

My current setup:

ACUConfig -Verbose -Output Console status

Starting log 2014-01-07 03:26:37
***** Start CheckAMT ******

Intel(R) AMT  in PROVISIONING_MODE_ENTERPRISE
***** Start FWUpdateData ******

***** END FWUpdateData ******

***** END CheckAMT ******

***** Start GetAmtFQDN ******

***** END GetAmtFQDN ******

Calling function Discovery...
Calling function GetLocalSystemAccount over MEI...
Function GetLocalSystemAccount over MEI ended successfully
Host Based Setup is supported
Current Control Mode: 2 (Admin)
Allowed Control Modes: 2 (Admin) and  1 (Client)
Function Discovery ended successfully
GetHostAndMEInfo output data:
    IsAMT:True,
    isAmtCapable:False,
    isEnterpriseMode:True,
    configurationMode:2,
    isRemoteConfigEnabled:False,
    AMTversion:8.0.10,
    isMobile:False,
    provisioningTlsMode:0,
    suuid:XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX,
    isClientConfigEnabled:True,
    hostBasedSupport:True,
    configurationState:2,
    FQDN:myhost.com.
supermicro.amt.org: Retrieving machine status...
***** Start DisplayAMTInfo ******

Host information- myhost.com
    UUID- XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
    Intel(R) AMT version- 8.0.10
    The system is configured in Admin Control mode.  
    The system TLS setup is unknown.  
    The system supports host-based configuration.  
    AMT state- Post-Provision(2)
***** END DisplayAMTInfo ******

***********

Exit with code 0 - The requested operation completed successfully.

[Gael_H_Intel]

The log that is attached does not seem to say a whole lot.  I noticed that you did not enter the whole command:

ACUConfig -Verbose -Output Console -Output file .log ConfigAMT profile.xml -DecryptionPassword my_profile_password

(I am not sure that matters but I forwarded your log file to the SCS team.)

[Rupert_H_]

Gael Hofemeier (Intel) wrote:

I noticed that you did not enter the whole command:
ACUConfig -Verbose -Output Console -Output file .log ConfigAMT profile.xml -DecryptionPassword my_profile_password

If you refer to this command:

ACUConfig -Verbose -Output Console status

you have to know that this is another command that I executed in addition to your in way to obtain my AMT config status (if its output can be useful).

However you are partially right:  It is true that I did not enter your whole command because my profile was already decrypted, so to be sure that the problem was not due to the fact that ACUconfig accepts only encrypted files, now I've encrypted my profile file (that is the following):

<?xml version="1.0"?>
<Profile>
  <SCSVersion>9.0.22.63</SCSVersion>
  <Description />
  <PowerOptions>
    <PowerState>PowerStateS0</PowerState>
    <WakeOnNetAccessSleepTimer>0</WakeOnNetAccessSleepTimer>
  </PowerOptions>
</Profile>

then I have reentered your entire command:

ACUConfig -Verbose -Output Console -Output file .log ConfigAMT profile.xml -DecryptionPassword my_profile_password

Here attached the new log file (However I've noticed no difference).

[Rupert_H_]

I note that in the meantime I have instaslled also LMS vers. 7.1.20 but the problem did not solved.

[Gael_H_Intel]

Your issue could be related to your not running with a supported OS.  I'm being advised that you may want to try doing your set up with the DTK Tools/Meshcentral.. Here are the links:

http://opentools.homeip.net/open-manageability