Intel® vPro™ Platform
Intel Manageability Forum (Intel® EMA, AMT, SCS & Manageability Commander)
Announcements
Intel® Endpoint Management Assistant (Intel® EMA) Cloud Start Tool for Azure* 2.0 is now available for download here.

The Intel® Manageability Commander 2.2 has been released! Learn more here.

The Intel® Endpoint Management Assistant, version 1.5.1 is now available for download here.

The Intel® Setup and Configuration Software tool will End of Life (EOL) on 12/31/2022. The Intel® Setup and Configuration Software Download will be available until March 31, 2021. For details, Please click here.
2562 Discussions

Access to the Intel® vPro™ Web UI with Active Directory User IDs

ÉGagn
Beginner
1,042 Views

My problem is:

When I attempt to log

 

on to the Intel AMT WebUI using a web browser,

 

the logon box prompts for a domain-based credential (domain\user with

 

associated password). The same credentials work correctly with VNC Viewer.

 

When I Deselect the IE option Enable Integrated Windows Authentication

 

I am able to log with the admin and the mebx password. I want use the

 

active directory for Web Ui authentication.

My computer settings:

Windows 8.1 and IE11

My SCSnsole

 

version 11

My amt version 9.1.20 intel

 

vpro

I look this kb http://support.microsoft.com/kb/908209 http://support.microsoft.com/kb/908209 but is a very old kb.

Some people can help me

 

please?

Thanks

Eric

0 Kudos
1 Solution
Dariusz_W_Intel
Employee
129 Views

You need to add one of following registry keys on each Intel AMT console system :

For 32 Bit: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209\"iexplore.exe"=dword:00000001

For 64 Bit: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209\"iexplore.exe"=dword:00000001

 

Use following command to add them:

REG ADD "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209" /v iexplore.exe /t REG_DWORD /d 00000001

REG ADD "HKLM\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209" /v iexplore.exe /t REG_DWORD /d 00000001

You have to use FQDN of vPro system when connecting to it (not just IP addess).

 

Remeber to not manually (or via AD scripts) alter or remove $iME AD computer objects in additional AD OU you created and used for Intel AMT Active Directory Integration in AMT profile!!!

 

Please see more explanation : https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?tu... https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?tu... and

http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?tur... http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?tur...

Regards

Dariusz Wittek

Intel EMEA | Biz Client Solution Architect

View solution in original post

2 Replies
Dariusz_W_Intel
Employee
130 Views

You need to add one of following registry keys on each Intel AMT console system :

For 32 Bit: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209\"iexplore.exe"=dword:00000001

For 64 Bit: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209\"iexplore.exe"=dword:00000001

 

Use following command to add them:

REG ADD "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209" /v iexplore.exe /t REG_DWORD /d 00000001

REG ADD "HKLM\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209" /v iexplore.exe /t REG_DWORD /d 00000001

You have to use FQDN of vPro system when connecting to it (not just IP addess).

 

Remeber to not manually (or via AD scripts) alter or remove $iME AD computer objects in additional AD OU you created and used for Intel AMT Active Directory Integration in AMT profile!!!

 

Please see more explanation : https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?tu... https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?tu... and

http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?tur... http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?tur...

Regards

Dariusz Wittek

Intel EMEA | Biz Client Solution Architect

View solution in original post

ÉGagn
Beginner
129 Views
Reply