Intel® AMT is not reachable

[Somemighiancity]

I was able to finally provision a workstation using TLS.

I can see the workstation in the EMA portal.

I can use most functionality available.

However, on the "Hardware Manageability" Tab is says "Intel® AMT is not reachable."

Is this the reason I'm not able to use the AMT terminal?

Thanks

The results from the config tool in verbose mode:

PS C:\Program Files (x86)\Intel\EMAConfigTool> .\EMAConfigTool.exe --verbose

Intel EMA Configuration Tool
Application Version: 1.1.0.183
Scan Date: 12/16/2025 1:17:47 PM

*** Host Computer Information ***
Computer Name: PDX-WOLF
Manufacturer: HP
Model: HP Z2 Tower G9 Workstation Desktop PC
Processor: Intel(R) Core(TM) i7-14700
Windows Version: Microsoft Windows 11 Pro
BIOS Version: U50 Ver. 03.05.01
UUID: 

*** SMBIOS Information ***
AMT Supported: True
AMT Enabled: True
SMBIOS ME SKU: Intel(R) Full AMT Manageability
SMBIOS ME Version: 16.1.38.2676
KVM Supported: True
SOL Supported: True
USB-R supported in BIOS: True
RSE Supported: True

*** ME Information ***
Version: 16.1.38.2676
SKU: Intel(R) Full AMT Manageability
State: Provisioned
Control Mode: Admin
Driver Installed: True
Driver Version: 2517.8.1.0
PKI DNS Suffix: Not Found
LMS State: Running
LMS Version: 2517.8.1.0
MicroLMS State: NotPresent
EHBC Enabled: False

*** ME Capabilities ***
AMT in Enterprise Mode: True
TLS Enabled: True
HW Crypt Enabled: True
Current Provisioning state: POST_PROVISIONING_STATE
NetworkInterface Enabled: True
SOL Enabled: True
IDER Enabled: True
FWUpdate Enabled: False
LinkIsUp state: True
KVM Enabled: True
RSE Enabled: True

*** Power Management Capabilities ***
Supported Power States:
5: PowerCycle_Off_Soft
8: Off_Soft
2: On
10: Master_Bus_Reset
11: NMI
4: SleepDeep
7: Hibernate
12: Off_Soft_Graceful
14: MasterBusReset_Graceful
Power Change Capabilities:
2: On
3: SleepLight
4: SleepDeep
7: Hibernate
8: Off_Soft

*** CIRA Information ***
CIRA Server: Not Found
CIRA Connection Status: NOT_CONNECTED
CIRA Connection Trigger: USER_INITIATED

*** ME Wired Network Information ***
Wired Interface Enabled: True
Link Status: Up
IP Address: 192.168.11.127
MAC Address: F8:ED:FC:5E:57:FD
DHCP Enabled: True
DHCP Mode: Passive
DNS Suffix (from OS): mysubdomain.mydomain.com

*** ME Wireless Network Information ***
ME Wireless Interface Not Detected

*** Last AMT Provisioning Attempt Details ***
Host Initiated: True
Provisioning TLS Mode: PKI
Provisioning Root Cert: numbers and letters
Provisioning Cert Hash Type: SHA256
Provisioning Server FQDN: *.mysubdomain.mydomain.com
Provisioning Server IP: Not Set
Secure DNS Mode: False
TLS Start Time: 12/16/2025 1:08:10 PM

*** Root Certificate Hash Entries ***

Root Cert 15: DigiCert Global Root CA, SHA256, 43:48:A0:E9:44:4C:78:CB:26:5E:05:8D:5E:89:44:B4:D8:4F:96:62:BD:26:DB:25:7F:89:34:A4:43:C7:01:61, Active, Default;
Root Cert 16: DigiCert Global Root G2, SHA256, CB:3C:CB:B7:60:31:E5:E0:13:8F:8D:D3:9A:23:F9:DE:47:FF:C3:5E:43:C1:14:4C:EA:27:D4:6A:5A:B1:CB:5F, Active, Default;
Root Cert 17: DigiCert Global Root G3, SHA256, 31:AD:66:48:F8:10:41:38:C7:38:F3:9E:A4:32:01:33:39:3E:3A:18:CC:02:29:6E:F9:7C:2A:C9:EF:67:31:D0, Active, Default;
Root Cert 18: DigiCert Trusted Root G4, SHA256, 55:2F:7B:DC:F1:A7:AF:9E:6C:E6:72:01:7F:4F:12:AB:F7:72:40:C7:8E:76:1A:C2:03:D1:D9:D2:0A:C8:99:88, Active, Default;

Pausing before ending process in 3 sec. The duration of this pause can be adjusted using the --delayterm option.
PS C:\Program Files (x86)\Intel\EMAConfigTool>

[Arun_Intel1 · Accepted solution]

Hi Somemighiancity,

We see that there is a latest BIOS update (03.05.02 Rev.A) released on Dec 8, 2025, for HP Z2 Tower G9 Workstation Desktop PC which is given below:

https://support.hp.com/us-en/drivers/hp-z2-tower-g9-workstation-desktop-pc/2100987204

We recommend you to update the BIOS to the latest as a best practice.

And please follow the plan of action given below:

Please login to the Intel EMA console through the Global Administrator login - Settings tab - Server Settings - Manageability Server 

Please uncheck the Enable Provisioning TLS Certificate Revocation check and save changes as shown in the screen shot and check if you are able reach the AMT and is the Hardware manageability tab working with CIRA getting connected.

If the issue still persists, then please follow the steps below:

1) Uninstall the existing agent files.

2) Enable AMT from MEBx and perform a full unprovisioning.

Note:

3) If the AMT is Enabled, then disable AMT from MEBx, save changes, PC will reboot and need to enable AMT again.

Copy agent files from a working machine and install them on the endpoint.

If you are further facing the issue, then please let us know the Mode of provisioning of the endpoint (ACM or CCM)

And the version of Intel EMA, the total number of endpoints having issue and the screen shot of the general tab of the endpoint from the Intel EMA console under tenant Admin login.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[Somemighiancity]

This is GREAT!  A simple check box.  I was having issues with CIRA working so I had switched to TLS because of it.  Thank you very much.

Now that this is working, when I click 'device page' here.  It asked for a username and password. Which username and password do I use?  If this is MEBx, I have randomized password set.

Again thank you very much for helping with this.  I have been hammering away all day trying to figure out what it could be.

[Arun_Intel1]

Hi Somemighiancity,

Glad to hear that we were able to help you with this query!

Please feel free to revert for any further query in the future, we are happy to assist you!

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro