No PKI-TLS Option

[AaronDavies]

EMA v1.11.1.0 - I have purchased a Digicert certificate and imported - is showing with a blue 'PKI Certificate' tag in EMA, Intermediate and Root certs also imported.

But I don't have the PKI-TLS option in the Intel AMT autosetup part of the Endpoint group configuration.  I need this for ACM (Admin Control mode).

Am I missing a step?

[Victor_G_Intel]

Hello AaronDavies,

Thank you for posting on the Intel® communities.

To help you move forward with your request can you please provide the information below:

How many endpoints are you looking to have in your deployment?

What AMT versions are the ones present on your future endpoints deployment?

Are the endpoints that you are going to use as well as your server fully updated?

Is your installation a multiserver or a single server one?

Is the ema server installed in a physical server or a virtual machine? Also what OS is the one being used on the server?

Could you please let us know the type of cryptographic version the Certificate you have is using? If you are not sure, please go to the EMA server, open the section called Manage Computer Certificates>Personal Store>Open the EMA Certificate, and review the cryptographic version. AMT 14 and later requires SHA256 Certificates; previous AMT versions work with SHA1.

Additionally, to further validate the information you find, please send us screenshots of the EMA certificate and all of the other three certificates in its certificate chain (the screenshots needed from each of the certificate lines are from 3 tabs each: General, Details, and Certificate Path).

The following logs will be needed as well:

EMA logs from Server:

[System drive]\Program File(x86)\Intel\Platform Manager\EmaLogs 

Best regards,

Victor G.

Intel Technical Support Technician

[Victor_G_Intel]

Hello AaronDavies,

Were you able to check the previous message we sent?  

Please let us know if you need further assistance.

Best regards,

Victor G.

Intel Technical Support Technician

[Victor_G_Intel]

Hello AaronDavies,

We have not heard back from you.

If you need any additional information, please submit a new question as this thread will no longer be monitored.

Regards,

Victor G.

Intel Technical Support Technician