AMT and AX210 wifi card

[Yauheni]

Hello, I am trying to set up Intel AMT with own EMA server and have a problem. Looks like  AMT is not recognizing Intel(R) Wi-Fi 6E AX210 160MHz. Latest driver is installed, I see the device in Endpoint Management Assistant, but it says CIRA not connected and Intel Management and Security Status utility doesn't show a wireless interface. Hardware is fully compatible with AMT, my wifi card is also compatible. Please, help me with resolving this issue.

[Suneesh]

Hello Yauheni,

Good day.

As per the details and log shared, we see that it is a HP Z2 Tower G9 Workstation Desktop PC which is running on latest BIOS.

We may have to confirm with your OEM (HP), if this desktop is a vPro certified system, and please confirm if the ethernet card or the network card is an on board with OEM.

As Intel EMA requires vPro certified system with onboard ethernet.

Please feel free to add on for any further query.

Regards,

Suneesh_Intel

[Yauheni]

Hi

This desktop is a vPro certified system, CIRA is connected if I use wired connection, wifi card was added manually (not from OEM), but this wifi card is support AMT technology. You mean it can be compatibility problem with this desktop and my ax210 card?

[Yauheni]

I have configured this desktop in Client Control Mode, but I don't see a window with code for kvm connection, I connect to it with rustdesk. Which program or technology is used  for sending code?

[Suneesh]

Hello Yauheni,

Intel® EMA (AMT) functionality is specifically designed to work with embedded wired and wireless network cards. It does not support external NICs (plug-in adapters). While some external NICs might claim to support vPro, manufacturers may block this functionality at the motherboard level, making it unavailable for use with AMT.

Please let us know if you have further questions or need clarification!

Best regards,

Suneesh_Intel

[Yauheni]

One more question.

When I get into ME configuration on my desktop I don't have such option to configure as User Consent, PKI configuration, where I can put custom DNS suffix for certificate etc. Previously this desktop has been configured by EMAAgent in CCM, can it cause the problem?

[Suneesh]

Hello Yauheni,

Good day,

Please check on the EMA server if Fully Qualified Domain Name (FQDN) has the same PKI DNS Suffix which is in the SSL/TLS certificate (Such as GoDaddy, Sectigo etc) and on the MEBx of the Endpoint and follow the below steps.

Step 1: check for the FQDN in the platform manager on the Intel EMA server.

This PC - local disk (C) - Program files x86 - platform manager - Intel Platform manager - settings

Step 2: Enable the PKI DNS Suffix in the MEBx of the Endpoint:

Restart the Endpoint - Press Ctrl+P (Or Ctrl + Alt + F1 on some units) to login to the MEBx

Log into MEBx (default password = admin)

For accessing MEBx, please refer to OEM guidance.

If first time logging in, the password change is required

Intel® AMT Configuration -> Remote Setup and Configuration -> TLS PKI -> PKI DNS Suffix

If PKI DNS Suffix menu is not available, then AMT is currently configured

Go back to Intel® AMT Configuration -> Unconfigure Network Access -> Full Unprovision

Enter the value for PKI DNS Suffix to match the provisioning certificate

For example, Intel.com (without quotes)

Exit and Save

Step 3: Please check if the DNS Suffix is the same on the TLS/SSL certificate as on the MEBx

NOTE: The PKI DNS Suffix is the combination of the Host Name + DNS Suffix.

Regards,

Suneesh_intel

[Suneesh]

Hello Yauheni,

Good day.

We are following up on the case. If further assistance is necessary, please do not hesitate to reply.

Regards,

Suneesh_Intel

[Yauheni]

And as I supposed if I apply AMT profile from EMA server from OS some options in ME utility become unavailable (User Consent, PKI configuration). The only way to reset AMT from bios.

[Yauheni]

I have created a new EMA server, created new intel amt profile, but now have
Intel® AMT setup status: Pending Activation

I tried to unprovision amt from bios, reinstalling amt package, no success

What is going wrong?

[Suneesh]

Hello Yauheni,

Good day.

Please check confirm the below steps:

1. Can you confirm if the Wi-Fi card is listed in the BIOS/UEFI settings under AMT configuration?
2. Are there any error messages or logs in the Event Viewer related to AMT or the Wi-Fi card?
3. Can you provide the output of the following PowerShell command to check the AMT status?

POWERSHELL

1Get-WmiObject -Namespace root\Intel_ME -Class AMT_GeneralSettings

Regards,

Suneesh_intel

[Yauheni]

Good day.

I understand that this wifi card is not supported and now  I am trying to get worked AMT with soldered OEM Intel(R) Ethernet Connection (17) I219-LM. It worked with my previous EMA server.

Got error 

[Yauheni]

I ran .\EMAConfigTool.exe --unconfigure /Full

I got 

And now even if I run EMAAgent it doesn't help, still Unconfigured

[Yauheni]

When I enable AMT in bios utility I automatically get this station in ADMIN mode

How can I switch in Client mode?

[Yauheni]

With Intel ACUWizard I changed status to Configured in Client Control Mode, but on EMA server I see 

Pending activation, I have 2 stations with the same status. Maybe something wrong with my server? Ports 443 and 8080 are opened and can be accessed from stations.

Please, share with we the right order how I can reset AMT, enable it in Client Control Mode and get Intel AMT setup status provisioned.

[Yauheni]

I figured out, the problem was triggered by EMA installer somehow created database on Azure SQL server in a wrong way. If I create database EMADatabase manually then it works well.