Mastering Intel AMT Configuration: Troubleshooting & Tools

Mastering Intel AMT Configuration: Troubleshooting & Tools

AD

Vmake Labs Video Enhancer

Vmake Labs Video Enhancer

Vmake Labs Video Enhancer uses AI to improve video quality, restore details, reduce blur, and upscale videos to 8K.

Vmake Labs Video Enhancer uses AI to improve video quality, restore details, reduce blur, and upscale videos to 8K.

Try Now

Table of Contents

1. Introduction
2. Troubleshooting Wi-Fi Profile Synchronization
3. Using the Intel Management and Security Status (IMSS) Tool
4. Exploring the Intel Emma Platform Manager
5. Understanding the Intel Manageability Server Log
6. Importing and Managing Intel Manageability Server Logs
7. Examining the Intel Emma Platform Manager
8. Tips and Best Practices for Intel AMT Configuration
9. Full Unprovisioning in Intel Emma
10. Conclusion

Introduction

In this article, we will discuss troubleshooting techniques for Intel Endpoint Management Assistant with Intel Active Management Technology (AMT). We will focus on resolving configuration issues and explore various tools and methods for managing Intel AMT. So, let's dive in and solve some common problems!

🔍 Troubleshooting Wi-Fi Profile Synchronization

One common issue that users may experience is trouble with Wi-Fi profile synchronization in Intel AMT with Intel Emma. To debug this issue, follow these steps:

1. Ensure that you are running the latest Intel Management Engine and Wi-Fi drivers from your device manufacturer.
2. Check the registry by navigating to HKEY_LOCAL_MACHINE\SOFTWARE\Intel\Wireless\AT6. Look for an option called "IEMT". Set the value to either 2 or 10.
   • Value 2: Enables a Prompt asking the end user if they want to synchronize the Wi-Fi profile they created in Windows with the management engine. This is useful for debugging purposes.
   • Value 10: Silently synchronizes new Wi-Fi profiles without prompting the end user. This is suitable for production usage.
3. After making these changes in the registry, instruct users to delete any Wi-Fi profiles in Windows that they want to synchronize, and then re-add those profiles. This will trigger the synchronization process with Intel AMT.

By following these steps, you should be able to resolve any Wi-Fi profile synchronization issues in Intel AMT with Intel Emma.

🛠 Using the Intel Management and Security Status (IMSS) Tool

The Intel Management and Security Status (IMSS) tool is a valuable tool that runs on all your vPro clients. It provides basic information about Intel AMT and can help you monitor the status of your AMT configuration. Here's what you can do with the IMSS tool:

1. Obtain basic information about Intel AMT on your clients.
2. Check if you have a Fast Call for Help or SIRA client.
3. Enable end users to disconnect remote control Sessions, especially for use cases like KVM remote control.

It is highly recommended to include the IMSS tool in your builds to ensure easy monitoring of Intel AMT status and better control over remote sessions.

🖥 Exploring the Intel Emma Platform Manager

The Intel Emma Platform Manager is a powerful tool that allows you to manage the status of your Intel MS Server as a whole. It gives you visibility into the components that make up the Intel MS solution and enables you to monitor events and make configuration changes. However, it's important to note that the Intel Emma Platform Manager does all its logging at a server level, not at a tenant level.

To interact with this tool and view all the logs, you need to be a global administrator. From the Intel Emma Platform Manager, you can monitor events, track system configurations, and perform basic configuration changes. It serves as a central hub for managing your Intel MS Server effectively.

Now that we have an overview of the Intel Emma Platform Manager, let's delve into the details of the Intel Manageability Server Log.

📜 Understanding the Intel Manageability Server Log

The Intel Manageability Server Log is a log file that provides valuable insights into the status of your Intel AMT configuration. In this section, we will discuss three common messages that you might encounter in the log:

1. Warning: Host setup failed, Auth failed: This warning indicates that the system's configuration in Admin Control Mode is encountering an authentication failure. It often occurs when using a certificate that does not match the DHCP option 15 received by the system from its local network. To address this issue, you can change the TLS PKI DNS suffix in the MEBx.
2. Intel Manageability WS Management Exception: The underlying connection was closed: This message is a common occurrence when the Intel Emma Agent starts configuring AMT before the AMT driver stack is fully initialized on the end platform. Typically, this issue resolves itself automatically. However, you can manually restart the Intel M Agent to retry the configuration.
3. Warning: Expired Phase 2 Record: If you make changes to an existing EMT profile on your Intel MS Server, such as adding or removing a wireless network, this message will appear. When this happens, Intel Emma tracks all devices using that EMT profile and applies the changes to these devices as they become available.

To access the Intel Manageability Server Log, navigate to the C:\Program Files (x86)\Intel\Platform Manager\Emma\Logs directory. Here, you will find separate log files for each of the MS services. These logs can also be imported into Log Management or aggregation tools for further analysis.

Now that we have gone through the log, let's move on to managing the Intel Manageability Server Logs effectively.

🗃 Importing and Managing Intel Manageability Server Logs

To manage Intel Manageability Server Logs efficiently, follow these steps:

1. Locate the log files in the directory: C:\Program Files (x86)\Intel\Platform Manager\Emma\Logs.
2. Import the logs into your preferred log management or aggregation tool.
3. Analyze the logs to identify any issues or anomalies in your Intel AMT configuration.

By importing the logs into a centralized management system, you can gain better visibility and control over your Intel Manageability Server environment.

Now that we have covered log management, let's take a closer look at the Intel Emma Platform Manager to learn how to follow logs and monitor a system with AMT configuration.

👀 Examining the Intel Emma Platform Manager

To examine the Intel Emma Platform Manager and follow logs for a system with AMT configuration, follow these steps:

1. Launch the Intel Emma Platform Manager. If you haven't used it before, you will need to add your server to the tool.
2. Click on the "Add Server" button and provide the name of your MS server and the management port (default is 8000).
3. Enter the global admin account credentials to log into the server.
4. Verify the certificate used for encrypting communications if prompted.
5. Once added, you can view the details of your MS server, including the default website, AJAX server, manageability server, and MSWARM server components.
6. Navigate to the "Events" tab to see a list of all events related to Intel AMT configuration on the computers.
7. Scroll through the log to analyze the configuration process and identify any errors or issues during provisioning.

The Intel Emma Platform Manager provides a comprehensive overview of your Intel AMT configuration and allows you to monitor and troubleshoot any problems effectively.

💡 Tips and Best Practices for Intel AMT Configuration

To ensure a smooth Intel AMT configuration process, here are some tips and best practices to keep in mind:

1. If you are using the TLS provisioning model, ensure that at least one device is online and running the Intel Emma Agent per subnet. This device acts as a relay for Intel AMT traffic to other devices on the subnet.
2. If you choose to use random MEBx passwords during AMT configuration, make sure to save a copy of the password before removing the device from Intel Emma. Once a device is removed, its password will be deleted from Intel Emma, and it may not be recoverable.
3. Note that Intel Emma performs a full unprovision of Intel AMT, not a partial unprovision. If you are running AMT version 11 systems and have added custom root suite hashes or DNS suffixes, these entries will be removed during unprovisioning. You will need to re-add these entries after unprovisioning.
4. For AMT 12 and above, the capability for full unprovisioning with entry removal is not available.

By following these tips and best practices, you can streamline your Intel AMT configuration process and ensure optimal performance.

🎬 Conclusion

In this article, we covered various troubleshooting methods and tools for resolving Intel AMT configuration issues. We explored Wi-Fi profile synchronization, the Intel Management and Security Status (IMSS) tool, the Intel Emma Platform Manager, the Intel Manageability Server Log, log management, and best practices for Intel AMT configuration. By following the steps and using these tools effectively, you can overcome common problems and ensure smooth and efficient Intel AMT management. If you have any more questions or need further assistance, please visit us at intel.com.