Retrieve MEBx Password

[CaptainMoloSFW]

I installed the EMA agent in CCM to an endpoint for testing. The AMT Autosetup profile was set to a 6 digit random password. As part of testing, I removed management from the EMA portal as I thought that would unset the MEBx settings on the endpoint, including the password, but it looks like that only remove the entry from the EMA server and doesn't change any settings on the endpoint. My two questions are:

1. How can I retrieve the MEBx password from the device, short of removing the battery from the laptop and draining all power, which I assume will reset the MEBx settings.
2. How are you supposed to remotely reset the MEBx settings? Say the endpoint will be wiped and re-imaged. When our RMM pushes the EMA agent and installer, the MEBx settings will be the same as before and I assume AMT provisioning will fail.

Thanks in advance.

[Arun_Intel1]

Hi CaptainMoloSFW,

Greetings!

Please note the answers for the queries asked:

1) Yes removing the CMOS battery is an option. Some OEM offers the option from the regular BIOS to reset MEBx BIOS (You may have to review if the option is available or not)

2)You may have to select Provisioning AMT endpoint from actions first. The option offers the random password of the endpoint.

Please find the screen shots given below for reference, for finding the random password.

Best Regards

Arun_Intel

[CaptainMoloSFW]

Thank you for the reply. I don't see the screenshots in your message, they're just blank icons.

When selecting Provision AMT, I get the following error message: The endpoint is provisioned by other tool and Intel® EMA does not have the record. Please use that tool or MEBx to unprovision this endpoint first

I assume this is because AMT is still provisioned from the previous install.

[IntelSupport]

Hello CaptainMoloSFW,

Greetings!!

Thank you for the update.

Apologies for the inconvenience caused.

Please allow us some time to check, and we will get back to you with an update soon with the screenshots.

Best Regards,

Vishal

[Arun_Intel1]

Hello CaptainMoloSFW,

Greetings!

Apologies for the inconvenience caused, the screen shots added has not been reflected properly, please check and confirm if you are able to see the screen shots added below:

Best Regards

Arun_Intel

[CaptainMoloSFW]

Ok, those are the steps that I did. However, when I selected the option to Remove AMT Provisioning, that's when I get the error message:

The endpoint is provisioned by other tool and Intel® EMA does not have the record. Please use that tool or MEBx to unprovision this endpoint first

What's the proper way to off-board a system from EMA if it's going to be re-imaged?

[Arun_Intel1]

Hello CaptainMoloSFW,

Greetings!

We see that you are getting an error while following the steps shared to change the AMT password, please share the error screen shot that you are getting?

And also to unprovision the endpoints, you need not to reimage the OS, instead, you may have to unprovision the endpoint and the delete the files.

Best Regards

Arun_Intel

[CaptainMoloSFW]

I no longer have a screenshot, but this is the error message: The endpoint is provisioned by other tool and Intel® EMA does not have the record. Please use that tool or MEBx to unprovision this endpoint first

What are the proper steps to unprovision the endpoint?

[pujeeth]

Hello CaptainMoloSWF,

Greeting from intel!

Would request you to provide us the below information for further troubleshooting,

1) OS version of the Server

2) SQL version 

3) Location of both; (physical, virtual) 

4) Will they be on the same server machine? 

5) Authentication mode: Local, Azure AD, or Windows AD 

6)  Intel® EMA software version: 

7)  Number of endpoints to be provisioned. 

 Location of endpoints: local or remote. 

9) complete detail of the endpoint

10) let us know if you have performed the CMOS reset.

Regards

Pujeeth_Intel

[pujeeth]

Hello CaptainMoloSFW,

Greetings,

The endpoint was not un-provision properly by using the option called: Provision Intel AMT from actions. From the next window we need to select Remove provisioning.

If we provision the endpoint with the random password option, we need to select the option Stop Managing Endpoint from the action button, in the next Window the tool offers the random password.

Reset MEBx remotely is not an option for security reasons, it needs to be physically.

At this point, removing the random password is limited. We suggest using the API option.

API v1.10

https://www.intel.com/content/www/us/en/download/19693/30076/intel-endpoint-management-assistant-intel-ema-api-sample-scripts.html

Use the API: Get-IntelEMAEndpointMEBXPassword.ps1

Intel_EMA_API_Sample_Scripts_v1_10 (1).zip\PowerShell\Example Scripts

Regards

pujeeth_intel

[pujeeth]

Hello CaptainMoloSFW,

Greeting from intel!

Hope you are doing well,

This is the first follow-up regarding the issue you reported to us.

We wanted to inquire whether you had the opportunity to review the plan of action (POA) we provided.

Regards

Pujeeth_intel

[pujeeth]

Hello CaptainMoloSFW,

This is the first second-up regarding the issue you reported to us.

We wanted to inquire whether you had the opportunity to review the plan of action (POA) we provided.

Feel free to reply to this email, and we'll be more than happy to assist you further.

Regards

Pujeeth_intel

[pujeeth]

Hello CaptainMoloSFW,

This is the third-up regarding the issue you reported to us.

We wanted to inquire whether you had the opportunity to review the plan of action (POA) we provided.

Feel free to reply to this email, and we'll be more than happy to assist you further.

Regards

Pujeeth_intel