Intel vPro® Platform
Intel Manageability Forum for Intel® EMA, AMT, SCS & Manageability Commander
2823 Discussions

Provision AMT 4.0 machine in Enterprise mode

JThat1
Beginner
1,920 Views

I have a single AMT 4.0 machine I am trying to provision in enterprise mode PSK using open MDTK version 0.1.34 I found at this url http://www.meshcommander.com/open-manageability http://www.meshcommander.com/open-manageability. It appears to be getting stuck while trying to apply the provisioning changes because it hasn't seeded/set the random number generator.

The machine I'm trying to provision is running debian stretch and I tried to provision it using a separate computer with a windows 10 vm.

Attached is the error log I receive.

0 Kudos
5 Replies
idata
Employee
755 Views

Hello jackson042,

 

 

Thanks for joining the community.

 

 

This AMT version you are running on (v4.1.3 as per attached log) is a bit old. The latest one is 9.0. I assume your machine is a bit old too probably. After that you are using the Mesh Commander which is an open source software that we support as best effort only. The official Intel tool is the Intel Manageability Commander: https://downloadcenter.intel.com/download/27807/Intel-Manageability-Commander https://downloadcenter.intel.com/download/27807/Intel-Manageability-Commander

 

 

I see you are using a Windows 10 virtual machine which might bring some unexpected errors. I would suggest you to try with an actual Windows machine to better get the vm out of the equation.

 

 

Last based on the log attached the provisioning stops on the TLS-PSK connection what makes me thing your TLS configuration is not correct or it is looking for a certificate. Do you have a valid certificate installed on the host machine?

 

 

Hopes this helps.

 

 

Jose A.
JThat1
Beginner
756 Views

Thanks for the quick response Jose,

I don't think the VM is the issue it is running in bridged mode and has its own IP address. I'm not using mesh commander to provision the machine I'm using open MDTK because meshcommander does not have any provisioning capabilities.

The software you suggested says it's used to connect and control activated machines. That is not my problem. I am trying to activate/provision my old AMT 4.1.3 machine.

What do you mean by valid certificate? Do I have to buy a certificate to perform PSK provisioning?

0 Kudos
idata
Employee
756 Views

Hello jackson042,

 

 

To do the provisioning process you need to use the Intel Setup and Configuration Software (SCS) package that you can download from the following URL: https://downloadcenter.intel.com/download/26505/Intel-Setup-and-Configuration-Software-Intel-SCS https://downloadcenter.intel.com/download/26505/Intel-Setup-and-Configuration-Software-Intel-SCS-

 

 

Inside you will find a tool called ACUConfig.exe, run it on a client machine (not the target one) and follow the installation steps, it will guide you through. For more details you can check the following user guide: https://www.intel.com/content/dam/support/us/en/documents/software/Intel_SCS_User_Guide.pdf https://www.intel.com/content/dam/support/us/en/documents/software/Intel_SCS_User_Guide.pdf at page 107 it details about certificates and at page 109 it explains about TLS setup.

 

 

Hope this helps

 

 

Jose A.
0 Kudos
idata
Employee
756 Views

Hello jackson042,

 

 

Do you have any updates, questions or comments in regards to this issue?

 

 

Please do not hesitate to contact us back.

 

 

If you consider the issue to be completed please let us know so we can proceed to mark this thread as resolved.

 

 

Regards

 

 

Jose A.
0 Kudos
idata
Employee
755 Views

Hello jackson042,

 

 

We will proceed to mark this thread as resolved. If you have further issues or questions just go ahead and create a new topic.

 

 

Jose A.
0 Kudos
Reply