Intel vPro® Platform
Intel Manageability Forum for Intel® EMA, AMT, SCS & Manageability Commander
2955 Discussions

Is there a way to get AMT provisioning working with a workgroup PC

Jools86
New Contributor II
1,115 Views

We have rolled out Intel EMA to our domain-joined Desktops

 

We NOW want to roll out Intel EMA to our Thin Clients.

 

The difference is our Thin Clients are in a Workgroup, not a Domain.

 

Are there simple instructions on how to configure an AMT Profile to work with a workgroup?

 

As it stands, deploying the existing AMT profile, I see the below error. I have set DNSSearchSuffixList, PrimaryDNS via Registry Settings, but to no avail.

 

Jools86_0-1705599990936.png

 

0 Kudos
4 Replies
MIGUEL_C_Intel
Moderator
1,075 Views

Hello, Jools86,


I hope you are doing well.


Yesterday, I worked with the developers, and they have confirmed that we can provision the endpoints (Thin Clients) by doing the following:

Access the MEBx BIOS of the endpoints.

Add the PKI DNS suffix of the Certificate chain.


We have seen in some scenarios that if the DNS of DHCP option 15 matches the DNS of EMA; the endpoints will be provisioned remotely.  We encourage giving it a try before doing the first option.


Regards,

Miguel C.

Intel Customer Support Technician



0 Kudos
Jools86
New Contributor II
1,055 Views

Got you. Thanks a lot Miguel will try that on Monday.

0 Kudos
Jools86
New Contributor II
998 Views

So I managed to get the Workgroup PC to work every time.

 

I didn't do either of the suggested - not through not intending to but I came across this Dell article.

 

The PC we have is a Dell Precision 3260, and I noticed that MEBx was not accessible from the BIOS, I found the article below, enabled Admin Password on the Dell, and then EMA then provisioned AMT successfully.

Unable to Access the MEBx / VPro Menu Using the F12 Boot Menu | Dell UK

 

Interestingly, If I reset the BIOS (CMOS) and remove the Admin password, then rebuild the machine it still provisions AMT fine.

 

So I get the feeling on the new Dells, they need an ADMIN password set once to free the MEBx to be usable. This is a bit rubbish from Dell (if that is the case). I have asked a colleague to test on another 3260 in case my test machine is now spoiled.

 

 

 

 

0 Kudos
Victor_G_Intel
Employee
992 Views

Hello Julian,


We appreciate your response.


Thank you for sharing your findings. In case you need anything else don’t hesitate to let us know.


Best regards,


Victor G.

Intel Technical Support Technician


0 Kudos
Reply