Setting up Intel EMA to use VPro out-of-band KVM

[NeroDo]

Hi there,

I'm looking for advise and clarification on how to set up Intel EMA to use vpro out of band feature

Client system : Intel AMT 16.1.25 and earlier

Server Intel EMA version: 1.10.1.0

We have large number of machines (>100) from DELL that have vpro capability and have been relying on meshcommander for remote KVM. However, starting with Intel AMT version 14.x.x and higher, we have seen issue with meshcommander remote KVM crashing while our application is running. We are trying to assess using intel EMA and vpro as whole.

We have been trying to set up a test system in the lab with 2 machines. 1 running our normal application (client) and one running every component of Intel EMA. 

We have the Vpro TLS PKO cert and have been able to import into the server. Setting up the profile as TLS relay (no CIRA) works but the Hardware Managebility tab does not work and keep loading. Setting the profile as CIRA always works but again Hardware Managebility tab does not work and keep loading and now terminal tab is grey out as well. 

My first question is can Hardware Managebility work without CIRA connection? I have seen no mention in user guide or any where that it cannot.

Second, Does CIRA connection works with Static IP. In user guide it states that CIRA works with both DHCP and Static IP

But in the troubleshooting CIRA Forum post it state that remote manageability only works with DHCP
https://www.intel.com/content/www/us/en/support/articles/000059019/software/manageability-products.html

On the target machine, IMSS is showing disconnecting 

Please advise, 

[NeroDo]

Hi there,

We have been in contact with our certification vendor. They have advised us that they cannot change the Root certificate to have SHA 256. The only certificate that they can provide will be the same as the one that we have already tested but only issue to a different domain name with .com ending instead of .aero. 

can you please advise if the above cert can works for CIRA or advise other vendor that can provide us with appropriate AMT certificate. 

[Victor_G_Intel]

Hello NeroDo,

Thank you for your response.

Please allow us some time to check this further with our AMT/EMA team and we will get back to you as soon as possible.

Regards,

Victor G.

Intel Technical Support Technician 

[Victor_G_Intel]

Hello NeroDo,

Thank you for your patience.

Based on our records the certificate that you have can’t be SHA1 because your AMT version no longer supports it. You can find more information on that in the link below:

https://www.intel.com/content/www/us/en/support/articles/000058972/technologies/intel-active-management-technology-intel-amt.html

However, we will be sending you a private message to discuss this further.

Best regards,

Victor G.

Intel Technical Support Technician

[MIGUEL_C_Intel]

Hello, Ngoc,

I hope this email finds you well.

By any chance, have you been able to work on our troubleshooting?  We will appreciate your findings.

Regards,

Miguel C.

Intel Customer Support Technician

[Victor_G_Intel]

Hello NeroDo,

We have not heard back from you.

If you need any additional information, please submit a new question as this thread will no longer be monitored.

Regards,

Victor G.

Intel Technical Support Technician