Intel vPro® Platform
Intel Manageability Forum for Intel® EMA, AMT, SCS & Manageability Commander
2827 Discussions

Intel EMA - CIRA not connected

MatthewPickham
Beginner
4,604 Views

Looking for some suggestions.

We are looking to use Intel EMA in the business so we can manage devices on our network. All machines will initially be provisioned when connected via ethernet to the network, then hopefully manage devices when connected to the VPN.

I've setup a server on the network and installed EMA.
Purchased an Intel AMT certificate and that part is all working fine. I have logged into the tenant and imported in my certificate.

My issue is that when I am provisioning machines by installing the EMAAgent.exe and EMAAgent.msh on the PC I am managing, the device says "Client Control Mode". 
I was able to get a machine into "Admin Control Mode" by running a full unprovision in mebx, then starting from scratch.

However, I was wondering if there was an easier process for this?

Also, it is saying "CIRA not connected" so I'm unable to use the Intel AMT tab.

The main purpose we are looking to use this is so we can connect to any machine, no matter if it's bluescreening or only booting into BIOS.

 

0 Kudos
7 Replies
IntelSupport
Community Manager
4,590 Views

Hello MatthewPickham,


Thank you for posting your question on this Intel® Community.


To better assist you, I would like to have the following details about your setup.


  • Intel® Active Management Technology (Intel® AMT) manageability engine firmware version.
  • Intel® Endpoint Management Assistant (Intel® EMA) version.
  • When importing a provisioning certificate into the Settings page, is it showing as PKI Certificate?


Wanner G.

Intel Customer Support Technician


0 Kudos
MatthewPickham
Beginner
4,560 Views

Hi Wanner,

 

Intel AMT version of this particular laptop is v14.0.33.1125.
This does differ as we have laptops ranging from brand new to 4 years old in the business.
But the same connection issues happens on all machines after testing.

Intel EMA version installed on server is 1.3.3.1.

Yes, the certificate shows "PKI Certificate" in bold blue writing. 

Kind regards,
Matthew

0 Kudos
IntelSupport
Community Manager
4,554 Views

Hello MatthewPickham,


Thank you for your response.


Please allow me to review the information provided. I will update this thread soon.


Wanner G.

Intel Customer Support Technician


0 Kudos
MatthewPickham
Beginner
4,515 Views

Hi Wanner,

Anything else I can try on my end?

Kind regards,
Matthew

0 Kudos
IntelSupport
Community Manager
4,439 Views

Hello MatthewPickham,


I would like to provide an update on this thread.


It is not possible to use the AMT tab if the system is not in setup to use CIRA or TLS. 


You can setup a system initially in ACM (admin control mode) by setting up a profile KVM redirection and not requiring user consent before beginning the KVM session.


ACM or CCM (client control mode) are dependent on how you setup the profile. My recommendation is that you make sure in Intel® MEBx you did not manually set user consent as well. This may prevent you from getting your system into ACM.


Wanner G.

Intel Customer Support Technician


0 Kudos
IntelSupport
Community Manager
4,389 Views

Hello MatthewPickham,


Were you able to review the recommendations provided?


If you need any further assistance, please let me know.


Wanner G.

Intel Customer Support Technician


0 Kudos
IntelSupport
Community Manager
4,367 Views

Hello MatthewPickham,


Since I have not heard back from you, I will proceed to close this thread.


If you need any further assistance, please let me know.


Wanner G.

Intel Customer Support Technician


0 Kudos
Reply