Intel EMA Certificate Chaining Issue

[RyomaFujiki]

Hello.
I am in the process of setting up EMA in Admin Control Mode, but I am unable to provision AMT with TLS-PKI.
I can see the following error in the Platform Manager
Error Message: Unable to get activation certificate chain from the database.

I have tried the following article on this, but it did not resolve the issue.
https://www.intel.co.jp/content/www/jp/ja/support/articles/000090529/software/manageability-products.html

I can connect to CIRA without any problem.
The version of EMA is 1.7.1.
I am using GoDaddy's certificate.

If you know of any solutions, please let me know.

[MIGUEL_C_Intel]

Hello, Ryoma,

I sent the Teams meeting; please reply to the private email.

I look forward to your feedback.

[RyomaFujiki]

Hello, Miguel C,

Thanks for the email.
I have checked the link to the meeting.
I hope our meeting will go well.

Regards,

[MIGUEL_C_Intel]

Hello, Ryoma,

See you soon.

[RyomaFujiki]

Hello, Miguel C,

Thank you for the meeting.
Deleting the inappropriate certificates in the certificate chain solved the issue.
I can provision ACM on a PC with AMT v16 and use AMT functionality.
I have not found the OCR functionality, but that is being drafted separately, so please help me.

Thank you very much for your support.

Regards,

[MIGUEL_C_Intel]

Hello, Ryoma,

It was our pleasure to assist you with the provisioning of the endpoints with Intel® AMT version 16.

Ryoma, did you create a new forum related to the One Click Recovery functionality?

One Click Recovery will be a feature included in newer EMA versions. The information is limited now. It is available in section 1.2.10 One Click Recovery of the Intel® Endpoint Management Assistant (Intel® EMA) Administration and Usage Guide Version: 1.6.0.

https://www.intel.com/content/dam/support/us/en/documents/software/manageability-products/intel-ema-admin-and-usage-guide.pdf#page=14

This Intel EMA feature will allow you to initiate a recovery process on a specified endpoint. When available, this feature will allow you to return the endpoint's OS to a last known good state, as well as recover from a bad state, bare-metal situation, or connectivity issues. Intel

AMT Out-of-Band (OOB) capability is required for this feature.

Intel EMA implements this future Intel platform feature by installing and deploying a Recovery Server as one of its

component servers. For information about Recovery Server settings, see Section 9.

We will gladly provide further assistance if it is necessary. Look forward to your response; if there is no response to this email, we will send you a follow-up on 8/30/2022.

[RyomaFujiki]

Hello, Miguel C,
Thank you for your response.

I would like to ask about OCR in another forum, since the first problem we presented has been resolved.

https://community.intel.com/t5/Intel-vPro-Platform/How-to-use-One-Click-Recovery-OCR-on-Intel-EMA/m-p/1403034#M9257

Or should I continue the communication in this forum?

Thank you for your support.
Best regards.

[MIGUEL_C_Intel]

Hello, Ryoma,

I am glad the first problem is resolved now.  Let’s talk about the One Click Recovery (OCR) feature in the new forum:

https://community.intel.com/t5/Intel-vPro-Platform/How-to-use-One-Click-Recovery-OCR-on-Intel-EMA/m-p/1403034#M9257