Community
cancel
Showing results for 
Search instead for 
Did you mean: 
raul_sanchez
Beginner
57 Views

Problems when i try to change admin name

When i use UpdateAdministrator function to change admin name, vPro PC is blocked and i have to enter in BIOS vPro for reset the system.
We can change the password with this function (UpdateAdministrator) without problems.
0 Kudos
4 Replies
57 Views

Hi,

Not familiar with the UpdateAdministrator function. Could you try SetAdminAclEntry instead? That should work for updating the Admin entry in the AMT device.

Thanks,

Sree

Ylian_S_Intel
Employee
57 Views

I use SetAdminAclEntry in Intel AMT Director and it does work. I never tried UpdateAdministrator... is that even an AMT fonction, I don't recall seeing it. Before chaning the admin name, I would create a seperate account with all privilages. This account could be used to fix things is the admin rename goes wrong.

Ylian (Intel AMT Blog)
raul_sanchez
Beginner
57 Views

Thanks, sorry but i put a wrong explication.

I use this function:

// Password must be coded with CoDeCoRC4
public VproStatus UpdateAdministrator(string name, string password)
{
IriSceneRemoteManager.AMT.SecurityAdministrationService.AdminAclEntryExType admin = new IriSceneRemoteManager.AMT.SecurityAdministrationService.AdminAclEntryExType();
admin.Username = name;

// DigestPassword
// Here is the procedure for changing the password:
// 1. Call GetDigestRealm() to get the Digest Realm string
// 2. Compute an MD5 hash on a concatenated message which contains:
// EntryEx.Username, :, DigestRealm, : Password
// 3. Set EntryEx.Password to the hash result
// 4. Call AddUserAclEntryEx() providing the EntryEx parameter

string digestRealm = string.Empty;
this.GetDigestRealm(out digestRealm);
string stringToCode = "admin" + ":" + digestRealm + ":" + CoDeCoRC4.Decode(password);
admin.DigestPassword = MD5.Create().ComputeHash(Encoding.Default.GetBytes(stringToCode));

return SetAdminAclEntryEx(admin);
}
Ajith_I_Intel
Employee
57 Views

Hi Raul,

What is the error code you are receiving when you change the admin name? Please make sure that the new name conforms to the following rules -

Username for access control. Contains 7-bit ASCII characters, in the

range of 33-126, excluding :, ,, <, >, &, and characters. String

length is limited to 16 characters. Username cannot be an empty

string.

Thanks.

Reply