Getac Intel EMA provisioning issue

[SysOps]

We have Intel EMA setup on a server in Azure and it works fine with our fleet of HP desktops and HP laptops. The HP desktops we use have Vpro support and Intel network cards and we can register them in full Admin Control Mode. The HP laptops have Vpro but don't have a onboard Intel NIC, to get around this we have been using a USB-C HP dock that has an Intel NIC and this works fine, we can get them working in full Admin Control Mode.

Here is an example of a HP laptop connected to the HP dock that has an Intel NIC using Intel EMA Configuration Tool before we run the Intel EMA agent install to provision it.

*** SMBIOS Information ***
AMT Supported: True
AMT Enabled: True
SMBIOS ME SKU: Intel(R) Full AMT Manageability
SMBIOS ME Version: 15.0.50.2633
KVM Supported: True
SOL Supported: True
USB-R supported in BIOS: True
RSE Supported: True

*** ME Information ***
Version: 15.0.50.2633
SKU: Intel(R) Full AMT Manageability
State: Not Provisioned
Control Mode: None
Driver Installed: True
Driver Version: 2512.7.3.0
PKI DNS Suffix: Not Found
LMS State: Running
LMS Version: 2512.7.3.0
MicroLMS State: NotPresent
EHBC Enabled: False

*** ME Capabilities ***
AMT in Enterprise Mode: True
TLS Enabled: False
HW Crypt0 Enabled: True
Current Provisioning state: PRE_PROVISIONING_STATE
NetworkInterface Enabled: True
SOL Enabled: True
IDER Enabled: True
FWUpdate Enabled: False
LinkIsUp state: True
KVM Enabled: False
RSE Enabled: True

*** ME Wired Network Information ***
Wired Interface Enabled: True
Link Status: Up
IP Address: 0.0.0.0
MAC Address: 84:69:93:EA:50:58
DHCP Enabled: True
DHCP Mode: Passive
DNS Suffix (from OS): hobartcity.com.au

You will note the LinkIsUp state: True and the DNS suffix is correct to match the Intel EMA server.

Recently we purchased some Getac UX10G3 tablets that have Intel Vpro support but have a non Intel NIC in them. It is ASIX brand. They do have Intel brand Wi-Fi NIC. We assumed that we would be able to plug these into the normal USB-C HP dock that has an Intel NIC and full provision them in Admin Control Mode but this doesn't work. We can only get these to register in Client Control Mode

In EMA Configuration Tool the LinkIsUp state isn't true and the DNS suffix is never populated.

Here is an example of Getac connected to the HP dock that has an Intel NIC,

*** SMBIOS Information ***
AMT Supported: True
AMT Enabled: True
SMBIOS ME SKU: Intel(R) Full AMT Manageability
SMBIOS ME Version: 16.1.32.2418
KVM Supported: True
SOL Supported: True
USB-R supported in BIOS: True
RSE Supported: True

*** ME Information ***
Version: 16.1.32.2418
SKU: Intel(R) Full AMT Manageability
State: Not Provisioned
Control Mode: None
Driver Installed: True
Driver Version: 2505.7.2.0
PKI DNS Suffix: Not Found
LMS State: Running
LMS Version: 2505.7.2.0
MicroLMS State: NotPresent
EHBC Enabled: False

*** ME Capabilities ***
AMT in Enterprise Mode: True
TLS Enabled: False
HW Crypt0 Enabled: True
Current Provisioning state: PRE_PROVISIONING_STATE
NetworkInterface Enabled: True
SOL Enabled: True
IDER Enabled: True
FWUpdate Enabled: False
LinkIsUp state: False
KVM Enabled: False
RSE Enabled: True

*** ME Wired Network Information ***
Wired Interface Enabled: True
Link Status: Down
IP Address: 0.0.0.0
MAC Address: Information Unavailable
DHCP Enabled: True
DHCP Mode: Active
DNS Suffix (from OS): Not Found

*** ME Wireless Network Information ***
Wireless Interface Enabled: False
Link Status: Down
IP Address: 0.0.0.0
MAC Address: Information Unavailable
DHCP Enabled: True
DHCP Mode: Unknown

It is almost like the MEBx on the Getac is not smart enough to recognise anything else but the built in ASIX brand NIC. Can anyone help?

[Arun_Intel1]

Hi SysOps,

Greetings!

We see that the HP laptops have Vpro but not an onboard Intel NIC, works fine with USB-C HP dock that has an Intel NIC. However the Getac UX10G3 tablets which has a non Intel NIC with normal USB-C HP dock that has an Intel NIC connected does not get the CIRA connected with ACM.

We would like to inform you that the endpoint used to provision with Intel EMA is advised to use an Onboard NIC which is a prerequisite of Intel EMA for better functionality.

However in the case of using a USB-C HP dock with should be a vPro supported dock, is the reason why the HP laptops are working as they would have been tested in the HP's environment.

But the ones from ASIX (Getac UX10G3 tablets) wouldn't have been tested with these docks, which may or may not work in such setup and hence the question of compatibility arises,

Therefore we would like to recommend you to use an endpoint with an onboard NIC, as the best known setup for Intel EMA.

You may also try to add the PKI DNS Suffix in the MEBx, following the article given below, and then provision the endpoint in ACM, for testing purpose only:

https://www.intel.com/content/www/us/en/support/articles/000058257/software/manageability-products.html

And additionally find the document for using DHCP option 15, to provision as well, in the attachment for your reference.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[SysOps]

Thank you, the Word document you gave us was helpful and we managed to work out how to put the PKI DNS Suffix in the MEBx and that allowed us to full provision into ACM via the Intel Wifi on these devices. Problem solved.

[Arun_Intel1]

Hi SysOps,

Glad to hear that the issue has been resolved!

Please feel free to contact us anytime for any further query, we are happy to assist you!

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro