Tag Archives: amt

IT

Intel ATM and SCCM

Leave a comment

I hate this. I can’t figure out how it works. It will install fine sometimes, and then not others. So far, after various amounts of fiddling I think I have it running. You’ll get the odd error messages, kerberos authentication will randomly work or not… But I think I’m in a happy place now.

Anyway, I plan to add error messages to this post that you may hit. So far, I’ve modified the task sequence so that error 42 is considered a success. This just indicates it didn’t have permission to save the log file for whatever reason. Another one I’ve seen is:
(0xc0002823). Call to function failed. DNS name does not exist. (0xc0000018)
The error code at the end actually means the exact opposite and that there are two IP addresses in DNS for this computer. This happens with us as people often connect via VPN which is in a different range. Delete the offending IP from DNS and try it again.

Stuff

SSM and AMT

Leave a comment

As you may be aware I’ve been experiementing with SCCM recently. I’m finding it amazing. I’ve not been on a course for this so to say it is daunting is a huge understatement. The myriad configuration options are enough to scare anyone off, but once you grasp the basic concepts of advertisements, packages and collections, life becomes easier. I’d recommend taking it one step at a time. Get one item configured and working before progressing onto the next.

Regarding that, the PC I’m testing on has intels “VPro” architecture. I really had no idea what this was until I had a cause to use it. Basically, for those of you with HP servers, it’s like a very cut down desktop version of an ILO. No remote console viewing or anything fancy. I can reboot the machine (in a hardware way), view some information on the settings and specifiy a boot image for recovery perhaps. I see it being quite useful but it’s a big of a pain to configure initially. Like msot things in SCCM, getting it do thing NOW is quite hard. As its intended to be used in a huge enterprise, everything happens in a scheduled fashion.

With this in mind, here is a basic list of what you will need. I used our own internal CA, to provision it, which makes things a little more difficult. Mainly because I spent a lot of time wondering why it didn’t work. Here;s a hint. If you are using your own internal CA for AMT provisioning, you must go into the AMT screen via ctrl+P (on my HP) and enter the hash (thumprint) of the CA Root certificate. You can USB provison them, you will need to download Intels AMT SDK http://software.intel.com/en-us/articles/download-the-latest-intel-amt-software-development-kit-sdk/and the USB key provisioning tool http://communities.intel.com/docs/DOC-1430 You make the .bin file with the program in the SDK thusly:

usbfile -create c:\setup.bin admin S3curepw! -hash c:\root-ca.cer “MY CAs Hash”

Obviously change the bits above to suit your environment. You can then format the usb key with the tool, give it the .bin file and boot from the usb key to provision the PC. After a while, assuming SCCM has been setup correctly, it will discover the AMT and it will be configured for you to use.