Intel vPro® Platform
Intel Manageability Forum for Intel® EMA, AMT, SCS & Manageability Commander
2943 Discussions

Retrieve MEBx Password

CaptainMoloSFW
Beginner
1,264 Views

I installed the EMA agent in CCM to an endpoint for testing. The AMT Autosetup profile was set to a 6 digit random password. As part of testing, I removed management from the EMA portal as I thought that would unset the MEBx settings on the endpoint, including the password, but it looks like that only remove the entry from the EMA server and doesn't change any settings on the endpoint. My two questions are:

 

  1. How can I retrieve the MEBx password from the device, short of removing the battery from the laptop and draining all power, which I assume will reset the MEBx settings.
  2. How are you supposed to remotely reset the MEBx settings? Say the endpoint will be wiped and re-imaged. When our RMM pushes the EMA agent and installer, the MEBx settings will be the same as before and I assume AMT provisioning will fail.

Thanks in advance.

0 Kudos
12 Replies
Arun_Intel1
Employee
1,225 Views

Hi CaptainMoloSFW,


Greetings!


Please note the answers for the queries asked:


1) Yes removing the CMOS battery is an option. Some OEM offers the option from the regular BIOS to reset MEBx BIOS (You may have to review if the option is available or not)


2)You may have to select Provisioning AMT endpoint from actions first. The option offers the random password of the endpoint.


Please find the screen shots given below for reference, for finding the random password.





Best Regards

Arun_Intel


0 Kudos
CaptainMoloSFW
Beginner
1,191 Views

Thank you for the reply. I don't see the screenshots in your message, they're just blank icons.

 

When selecting Provision AMT, I get the following error message: The endpoint is provisioned by other tool and Intel® EMA does not have the record. Please use that tool or MEBx to unprovision this endpoint first

I assume this is because AMT is still provisioned from the previous install.

0 Kudos
IntelSupport
Community Manager
1,170 Views

Hello CaptainMoloSFW,


Greetings!!


Thank you for the update.


Apologies for the inconvenience caused.


Please allow us some time to check, and we will get back to you with an update soon with the screenshots.


Best Regards,

Vishal



0 Kudos
Arun_Intel1
Employee
1,148 Views

Hello CaptainMoloSFW,

 

Greetings!

 

Apologies for the inconvenience caused, the screen shots added has not been reflected properly, please check and confirm if you are able to see the screen shots added below:

Screenshot 3.pngScreenshot 2.pngScreenshot 1.png

 

Best Regards

Arun_Intel

0 Kudos
CaptainMoloSFW
Beginner
1,124 Views

Ok, those are the steps that I did. However, when I selected the option to Remove AMT Provisioning, that's when I get the error message:

The endpoint is provisioned by other tool and Intel® EMA does not have the record. Please use that tool or MEBx to unprovision this endpoint first

What's the proper way to off-board a system from EMA if it's going to be re-imaged?

0 Kudos
Arun_Intel1
Employee
1,102 Views

Hello CaptainMoloSFW,


Greetings!


We see that you are getting an error while following the steps shared to change the AMT password, please share the error screen shot that you are getting?


And also to unprovision the endpoints, you need not to reimage the OS, instead, you may have to unprovision the endpoint and the delete the files.


Best Regards

Arun_Intel


0 Kudos
CaptainMoloSFW
Beginner
951 Views

I no longer have a screenshot, but this is the error message: The endpoint is provisioned by other tool and Intel® EMA does not have the record. Please use that tool or MEBx to unprovision this endpoint first

 

What are the proper steps to unprovision the endpoint?

0 Kudos
pujeeth
Employee
925 Views

Hello CaptainMoloSWF,


Greeting from intel!


Would request you to provide us the below information for further troubleshooting,


1) OS version of the Server

2) SQL version 

3) Location of both; (physical, virtual) 

4) Will they be on the same server machine? 

5) Authentication mode: Local, Azure AD, or Windows AD 

6)  Intel® EMA software version: 

7)  Number of endpoints to be provisioned. 

 Location of endpoints: local or remote. 

9) complete detail of the endpoint

10) let us know if you have performed the CMOS reset.


Regards

Pujeeth_Intel


0 Kudos
pujeeth
Employee
918 Views

Hello CaptainMoloSFW,

 

Greetings,


The endpoint was not un-provision properly by using the option called: Provision Intel AMT from actions. From the next window we need to select Remove provisioning.

 

If we provision the endpoint with the random password option, we need to select the option Stop Managing Endpoint from the action button, in the next Window the tool offers the random password.

 

Reset MEBx remotely is not an option for security reasons, it needs to be physically.

 

At this point, removing the random password is limited. We suggest using the API option.

API v1.10

https://www.intel.com/content/www/us/en/download/19693/30076/intel-endpoint-management-assistant-intel-ema-api-sample-scripts.html

Use the API: Get-IntelEMAEndpointMEBXPassword.ps1

Intel_EMA_API_Sample_Scripts_v1_10 (1).zip\PowerShell\Example Scripts


Regards

pujeeth_intel


0 Kudos
pujeeth
Employee
831 Views

Hello CaptainMoloSFW,


Greeting from intel!

Hope you are doing well,


This is the first follow-up regarding the issue you reported to us.

We wanted to inquire whether you had the opportunity to review the plan of action (POA) we provided.


Regards

Pujeeth_intel


0 Kudos
pujeeth
Employee
721 Views

Hello CaptainMoloSFW,


This is the first second-up regarding the issue you reported to us.

We wanted to inquire whether you had the opportunity to review the plan of action (POA) we provided.

 

Feel free to reply to this email, and we'll be more than happy to assist you further.


Regards

Pujeeth_intel


0 Kudos
pujeeth
Employee
661 Views

Hello CaptainMoloSFW,


This is the third-up regarding the issue you reported to us.

We wanted to inquire whether you had the opportunity to review the plan of action (POA) we provided.

 

Feel free to reply to this email, and we'll be more than happy to assist you further.


Regards

Pujeeth_intel


0 Kudos
Reply