Cleanup old provisioning using a script

[Vikas12]

I have been trying to set up the VPRO environment and am having an issue where it says " this endpoint was provisioned with some other tool that EMA does not have a record for".

Initially, I thought it was a certificate issue, but when I tried a new machine that was not used at all, it had the same error. I have tried unprovisioning using MEBx, and it lets me provision again, but shows the same error in the EMA console.

Attaching screenshots

[Arun_Intel1]

Hi Vikas12,

We see that you have provisioned the endpoints using a tool that you are not aware of and so does Intel EMA.

Now you want to fully unprovision those old endpoints and reprovision it again.

Before we proceed, we would request you to please fully unprovision the old endpoint using the article given below, and then stop managing the endpoint from the Intel EMA console, where the steps are as given below:

Once done, then please reprovision the endpoint by generating the new agent files as shown in the steps below and share your observation.

Note: Please proceed with the steps given below, if you have the MEBx password and can login to the MEBx.

Please follow the steps below to provisioning the endpoints:

1. Access the Intel® Endpoint Management Assistant (Intel® EMA) using your tenant credentials.
2. From the left toolbar, select Endpoints.
3. Click View next to the endpoint you wish to unprovision.
4. Under Actions, select Stop managing the Endpoint.
5. In the new window, choose Remove Provisioning (first option at the bottom).
6. On the target endpoint:

• Delete any existing agent files.
• Access MEBx and perform a full unprovision the endpoint from MEBx -Intel® AMT Configuration -> Unconfigure -Network Access -> Full Unprovision
• Create a new Endpoint Group and a new AMT Profile configured for Host-Based Provisioning.
• Download a new agent file using the newly created profile and Install it on the endpoint.
• Install the new agent file.

1. Wait a few minutes, then refresh the EMA web UI.
2. Select the endpoint and check the General tab to see if the CIRA connection is established.

While provisioning the endpoints, there are two types of Provisioning, one is by adding the PKI DNS Suffix in the MEBx and the other is through the DHCP option 15.

1) To manually provision the endpoint using the PKI DNS Suffix in the MEBx is as given in the article given below:

https://www.intel.com/content/www/us/en/support/articles/000058945/software/manageability-products.html

And also please refer to the community link given below:

https://community.intel.com/t5/Intel-vPro-Platform/Intel-AMT-Provisioning-Certificate-with-a-local-domain/m-p/1397682

Please share your observation once done.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[Vikas12]

Now it is stuck on Pending activation, i have rebooted the machine a few times and also tried clearing the record and then provisioning again in MEBx.

[Arun_Intel1]

Hello Vikas12,

We shall send out an email requesting for the ECT logs of the endpoint and few other details, request you to share it through the email as there are sensitive information in those logs.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[Arun_Intel1]

Hello Vikas12,

Please feel free to revert for any further query!

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro