Server configuration guidance

[blueshirtguy]

I have installed the server per the Server Installation Guide rev 1.14.0 but can't connect to clients. Is there some kind of general troubleshooting steps I can follow to figure out why this is not working? Thanks in advance.

[Arun_Intel1]

Hi blueshirtguy,

Greetings!

Please share the screenshot of the DNS lookup error that you are getting with the EMA server logs and the ECT logs as well:

Steps to collect the EMA logs from the Server

Default Path:[System Drive]\Program File(x86)\Intel\Platform Manager\EmaLogs

 Please send me the files without the date called:

EMAlog-Webserver.txt

EMAlog-Swarmserver.txt

EMAlog-Ajaxserver.txt

EMAlog-Recoveryserver.txt

EMAlog-Manageabilityserver.txt

Steps to collect the Intel® EMA Configuration Tool (ECT) Logs:

Download the tool from the following link: Intel® EMA Configuration Tool

Installation:

Download and unzip the tool.

Double-click the .msi file and follow the installation prompts.

Run the Tool:

 a. Open a command prompt as an administrator (or use Windows PowerShell*).

 b. Navigate to the installation folder (default: C:\Program Files (x86)\Intel\EMAConfigTool).

 c. Run the following command:

 EMAConfigTool.exe --verbose

Best Regards

Arun_intel

[blueshirtguy]

Hello Arun,

Thanks for helping me.

Regarding the screenshot of the DNS lookup error with teh EMA server logs, I'm not really sure how to display the DNS lookup error. Could you explain that some more?

There are 3 screenshots attached showing the ECT command output.

The 5 log files are also attached.

[Arun_Intel1]

Hi blueshirtguy,

Sure, thanks for sharing the logs, we are working upon the details shared and will share our plan of action, shortly.

Best Regards

Arun_intel

[Arun_Intel1]

Hello blueshirtguy,

Greetings!

Thanks for sharing the logs requested, as per the logs shared, we see that the control mode is unclear, hence please confirm the mode in which the endpoint has been configured?

And we do not see the error mentioned (DNS lookup failed) in the Intel EMA logs shared.

So please share the screen shot or the place where you are seeing that the DNS lookup failed error is seen.

And please share the version of the IIS server installed, the OS on the Intel EMA server and the Endpoint under consideration.

Best Regards

Arun_intel.

[blueshirtguy]

Hello @Arun,

Thanks again for your speedy feedback.

The endpoint was setup using the Agent Files based on the profile and group settings in the attached screenshots.

As for the "DNS lookup failed", I didn't mention that error.

Server OS is Windows Server 2022 v21H2 running IIS v 10.0.20348.1.

Endpoint OS is Windows 10 Enterprise LTSC v21H2.

[Arun_Intel1]

Hi blueshirtguy,

Thanks for sharing the details, we suggest you to provision the endpoints in the Client Control Mode and share your observation.

And please share the screen shot of the home page of the Intel EMA server logged in tenant login mode.

Best Regards

Arun_intel

[blueshirtguy]

Regarding provisioning the endpoints in the Client Control Mode, the previously-shared screenshot "2024-12-17 09_50_51-Shell Handwriting Canvas.png" shows "Intel AMT autosetup: Enabled, HBP". I believe Host Based Provisioning always results in CCM so I believe I have already attempted to provision my endpoint in the Client Control Mode. If I'm mistaken on some point, please correct me.

Regarding the screen shot of the home page of the Intel EMA server logged in tenant login mode, I'm unclear what this means so I have attached screenshots of the home page logged in as the Global Administrator as well as a Tenant Administrator.

[Arun_Intel1]

Hi blueshirtguy,

Greetings!

To clarify on the provisioning, we can use the Host Based Provisioning for both ACM and CCM, infact it is always better to use the HBP over TLS Provisioning.

Thanks for sharing the screen shots, however we wanted to verify the page where the endpoint mode is seen in the tenant admin login as the ECT does not show the mode of provisioning.

Kindly try and provision the endpoint in CCM and share your observation, as the ACM or the Admin control mode would require the TLS/SSL Certificate to be purchased and used, hence let us confirm the working first in the CCM/ Client Control Mode which would require the user consent.

Best Regards

Arun_Intel

[blueshirtguy]

Hi @Arun_Intel1 

Thanks for clarifying that Host Based Provisioning can enable ACM and CCM modes.

I believe the attached screenshot shows the page you are wanting to see but I imagine you'll be disappointed since there are no managed endpoints yet, and thus we cannot see the mode of provisioning yet. If this is not the screenshot you're looking for, could you provide detailed instructions for how to navigate to the screen you would like to see?

I'm not sure how you would like for me to try to re-provision the endpoint. I have Installed / Updated EmaAgent as Administrator multiple times, but nothing has changed still. See attached for a screenshot of the installer.

As a side note, we would eventually like to be able to use the ACM mode with the TLS/SSL Certificate which we have already purchased and installed on the EMA server.

[Arun_Intel1]

Hi blueshirtguy,

Thanks for confirming that the endpoint has not been provisioned.

Please find the download link given below, where you would find the installation guide on the right side of the page, kindly refer to the installation guide where you may have to generate the agent files from the Intel EMA console and then install it on the endpoint that needs to be monitored through the Intel EMA.

https://www.intel.com/content/www/us/en/download/19449/intel-endpoint-management-assistant-intel-ema.html

If you have already provisioned the endpoint but still the endpoint is still not seen, then kindly do a full unprovision of the endpoint in the MEBx and the reprovision it again with the agent files generated from the Intel EMA.

Steps to fully unprovision the endpoint from the MEBx is as given below:

1. Unprovison the endpoint from the Intel® EMA server web console. Click on Actions and select Provision AMT devices,
2. Click on Actions and select Stop managing all the desired endpoints.
3. Go to the endpoint and stop any previous Intel® EMA agent profile running on the endpoint.
4. To prevent possible issues, perform a Full Unprovision of the endpoint from MEBX BIOS, where you may have to restart the endpoint and press ctrl + P to get into the MEBx.
5. Go into MEBX, and under Intel® AMT Configuration Network Access State, choose Enable.
6. Next, review if the Intel® EMA profile (in the EMA Server console) is in CIRA mode and set the desired settings; CCM.
7. Enable Intel® AMT Auto-setup and choose the right AMT profile.
8. Choose HBP (Host Base Provisioning), and create your password, disable the randomized password. This will make the adoption easy.
9. Install the Intel® EMA agent files into the endpoint.

Once done, kindly share your observation.

Best Regards

Arun_intel

[blueshirtguy]

Hello @Arun_Intel1 ,

The link you sent is for a zip file containing 9 PDF documents. The document "Intel EMA ServerInstallation MaintenanceGuide_Rev1.14.0" is what I have followed thus far, but am still stuck. If there are specific steps I should take to generate the agent files and install on the endpoint, could you provide those? Or maybe the name of the document and a page number to reference.

I tried to run through the unprovisioning instructions just now and got stuck on the first step. It says "Unprovison the endpoint from the Intel® EMA server web console. Click on Actions and select Provision AMT devices," but I don't see an Actions link or button when I log into the EMA server web console so I'm stuck. See attached for what I see when I log into the EMA server web console.

[Arun_Intel1]

Hi blueshirtguy,

Greetings!

This is because, you have not Provisioned the endpoint with the EMA Agent file.

Please find the link given below for the Intel EMA Admin and Usage guide, and kindly find the section 3.2 on page 18 on how to provision the Endpoint with the EMA Agent file.

https://www.intel.com/content/dam/support/us/en/documents/software/manageability-products/intel-ema-admin-and-usage-guide.pdf

The installation guide given above consists of the detailed explanation about how to provision the endpoint.

Kindly share your observation once the endpoints are configured successfully.

Best Regards

Arun_intel

[Arun_Intel1]

Hi blueshirtguy,

Greetings!

Please let us know if you had an opportunity to execute the plan of action shared?

Best Regards

Arun_intel

[Arun_Intel1]

Hi blueshirtguy,

Greetings!

Thank you for contacting Intel!

Please feel free to reply for any further query.

Best Regards

Arun_intel

[blueshirtguy · Accepted solution]

Sorry for not replying sooner. I was out of office for about 10 days. I ended up getting in contact with someone at Intel and they got us up and running with Open AMT Cloud Toolkit. You can mark this thread as solved now.

[Arun_Intel1]

Hi blueshirtguy,

Greetings!

Glad that the issue has been resolved!

Thank you for the update.

Best Regards

Arun_intel