AMT 19.x / 20.x broken. Warning to you all.

[Jools86]

Hey guys,

As an FYI. Intel have recently broken AMT management, with no fix in sight.

EMAConfigTool.exe no longer works with the newer chipsets, nor does ACUConfig or Meshcmd.

They have a new tool called "RPC_Windows_x64.exe" but de-provisioning with the latest version does not work, earlier versions delete the BIOS when calling de-provisioning command line.

Please test your automations and help put pressure on Intel to fix this issue.

[Arun_Intel1]

Hi Jools86,

Thank you for your feedback, it is valuable to us. We have conveyed your concerns to the Product Management and are waiting for feedback. 

Best Regards

arun_intel

[Jools86]

Intel EMA 1.14.3 (latest version) also struggles to Provision AMT 19.x machines.

"Warning: (2) - Could not get CRL file and verify it"

[Arun_Intel1]

Hi Jools86,

Our dedicated engineering team has reached out via email to offer a meeting regarding EMA configuration and troubleshooting with the RPC-GO software.

As part of Intel, we are committed to ensuring your success with Intel vPro configuration. Please let us know your availability to schedule the meeting."

Thanks & Regards

Arun

Intel Customer Support Technician

[Jools86]

Not received the email yet.

As a reminder Intel EMA 1.14.3 does not provision AMT 19.x devices, so issue is not just RPC_Windows_x64 not working.

[Arun_Intel1]

Hi Jools86,

Greetings!

We see that the engineering team has already communicated with you, and is aware of the ongoing issue.

They are working upon the issue and we will have an update shortly!

We appreciate your patience and understanding.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[Jools86]

*** For anyone who has the same issue as me, here is the state of play ***

This brand new version of RPC_Windows_x64.exe (catchy name!) 2.48.2 de-provisions AMT 18.x and below fine: https://github.com/device-management-toolkit/rpc-go/releases/tag/v2.48.2 

It also works fine on "Network access" BIOS provisioning of AMT 19.x / Cannot test EMA (ACM) Provisioned as we have the following outstanding issue:

Intel EMA 1.14.3 cannot provision AMT 19.x chips. Manageability Server will show you this final error during the attempted provisioning of the machine:

Warning: (2) - Could not get CRL file and verify it 

^^^

Have received an email stating Developers are working on a fix for the above.

[Arun_Intel1]

Hi Jools86,

The Technical Solution Specialist (TSS) is communicating with the Development team, we will keep you posted once we have an update.

We greatly appreciate your patience and understanding in this matter!

Thanks & Regards

Arun

Intel Customer Support Technician

[Jools86 · Accepted solution]

Hey guys, Intel have provided me with the following 2 fixes (Thanks guys) which I am please to say work:

Fix 1 - ACUConfig / EMAConfigTool  no longer supported AMT 19.x and onwards

This brand new version of RPC_Windows_x64.exe (catchy name!) 2.48.2 successfully de-provisions all AMT FW fine: https://github.com/device-management-toolkit/rpc-go/releases/tag/v2.48.2 

Fix2 - EMA 1.14.3 failing to Provision AMT 19.x and above

Uncheck "Enable Provisioning TLS Certificate Revocation Check"

[Arun_Intel1]

Hi Jools86,

Glad to hear that the solution provided has worked and the issue has been resolved!

Please feel free to revert for any further query!

Thanks & Regards

Arun

Intel Customer Support Technician