Intel EMA - CIRA Not connected (Lenovo ThinkPad L14 Gen4 21H)

[Krzybed]

Hello everyone,

I’m facing an issue with Intel EMA and CIRA connectivity and would appreciate your help.

When I try to remotely connect to a device that is connected to the corporate network via VPN, I consistently see the status:
“CIRA Not Connected.”

This problem does not occur when the device is physically located within the corporate network – in that scenario, everything works as expected.

My goal is to use Intel EMA to manage devices that are outside the corporate network and not connected to VPN

Aditionally I have already attempted unprovisioning from the Intel EMA console and unprovisioning directly from MEBx

Device is provisioned In ACM 

Any guidance would be appreciated,

Thanks,

[Arun_Intel1]

Hi Krzybed,

We see that the endpoint is getting provisioned inside the company's corporate network, however does not get connected when the endpoint is outside the network connected to VPN.

This behavior of CIRA is an expected one, reason being that the Intel EMA does not support Dual tunnel concept, therefore the CIRA tunnel is unable to connect when a VPN tunnel is already established.

Therefore, we would recommend you to provision the endpoint either when connected to the companies domain or have a physical access to the endpoint so that we can get into the MEBx and then add the PKI DNS Suffix in the MEBx by restarting the endpoint and pressing control + P during a reboot.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[Krzybed]

Hi @Arun_Intel1 ,

The endpoint is not connecting to CIRA even without VPN. 

I provisioned endpoint while it was connected to company domain, and it has PKI domain suffix visible in MEBx 

 

[Arun_Intel1]

Hi Krzybed,

We shall send out an email with the logs required for further analysis, kindly share the logs through the email as the logs would contain sensitive information.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[Krzybed]

Hi @Arun_Intel1 ,

I've Already sent log file via email.

thanks,