Hi...
I have been using all day on this issue.. and something is not working.
On the RCS server I used the RCSutils to install a certificate bought from Comodo with the /RCSUser option set to NetworkService.
I get this
Command: RCSUtils.exe /Certificate view /rcsuser NetworkService
Intel(R) SCS Utils starting:
Getting the certificates from the user NT AUTHORITY\NETWORK SERVICE personal Certificate store
Enumerating the user certificate store succeeded.
The 2 certificate(s) found in the store:
Certificate Subject: CN=rcs.domain.com, OU=COMODO AMT SSL, OU=Hosted by Hosted by TRUSTZONE, OU=Domain Control Validated - Thumbprint: XXXXXXXXXXXXXXXXXXXXXXXXXXX, Contains private key: Yes, Valid until: 09-10-2020 01:59:59, PKI Configuration(ZTC): True, Mutual TLS: False
Certificate Subject: CN=XXXXX - Thumbprint: XXXXXXXXXXXXXXXXXX, Contains private key: Yes, Valid until: 14-09-2028 15:50:37, PKI Configuration(ZTC): False, Mutual TLS: False
-------------------------------------------------------------------------------
Exit status for the running user NT AUTHORITY\SYSTEM:
Success.
Running "RCSUtils.exe /certificate validate XXXXXXXXXXX /RCSUser NetworkService /log file _validate.log"
12-10-2018 12:20:59: -------------------------------------------------------------------------------
12-10-2018 12:20:59: Intel(R) SCS Utils log, running user: NT AUTHORITY\SYSTEM
12-10-2018 12:20:59: -------------------------------------------------------------------------------
12-10-2018 12:20:59: Validating XXXXXXXXXXX Certificate in the user NT AUTHORITY\NETWORK SERVICE certificate store
12-10-2018 12:20:59: The certificate path found contains:
- Certificate subject CN=rcs.domain.com, OU=COMODO AMT SSL, OU=Hosted by TRUSTZONE, OU=Domain Control Validated, Thumbprint XXXXXXXXXXXXXXXXXXXXXXXXXXXX,
- Certificate subject CN=COMODO SHA-2 Pro Series Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB, Thumbprint 5DBAFB06715C7E327C9831AB354A88747E41344A,
- Certificate subject CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB, Thumbprint D1EB23A46D17D68FD92564C2F1F1601764D8E349,
The certificate is not valid for Intel(r) RCS Mutual TLS(HTTPS) connection and is valid for Intel(r) RCS remote PKI(ZTC) connection
12-10-2018 12:20:59: Verifying the certificate from the user certificate store succeeded.
12-10-2018 12:20:59: -------------------------------------------------------------------------------
12-10-2018 12:20:59: Exit status for the running user NT AUTHORITY\SYSTEM:
12-10-2018 12:20:59: Success.
So i guess the certificate is installed just fine, or am I wrong here? Is it a problem that it sees two certificates?
It says the fist certificate is valid for PKI Configuration(ZTC) but not the second one, which is OK since is a certificate that's from out own internal ca.
When i start the RCSServer service i get this in the log:
2018-10-12 12:27:47: Thread:3300(DETAIL) : RCS Server , Category: ServiceSettings Source: Src\ServiceSettings.cpp : ServiceSettings::ServiceSettings::Init Line: 146: Start ServiceSettings
2018-10-12 12:27:47: Thread:7084(INFO) : RCS Server , Category: -------------- Source: Src\RCSServer.cpp : CServiceModule::Run Line: 1313: ------------------------------------
2018-10-12 12:27:47: Thread:7084(INFO) : RCS Server , Category: Source: Src\RCSServer.cpp : CServiceModule::Run Line: 1314: Start Server version: 12.0.0.129 ------------
2018-10-12 12:27:47: Thread:7084(INFO) : RCS Server , Category: -------------- Source: Src\RCSServer.cpp : CServiceModule::Run Line: 1315: ------------------------------------
2018-10-12 12:27:47: Thread:7084(DETAIL) : RCS Server , Category: ServiceSettings Source: Src\ServiceSettings.cpp : ServiceSettings::ServiceSettings::Init Line: 146: Start ServiceSettings
2018-10-12 12:27:47: Thread:7084(INFO) : RCS Server , Category: Source: Src\RCSServer.cpp : CServiceModule::Run Line: 1350: Start Server version: 12.0.0.129 ------------
2018-10-12 12:27:47: Thread:7084(DETAIL) : RCS Server , Category: Source: Src\RCSServer.cpp : CServiceModule::Run Line: 1354: Enhanced Security is enabled.
2018-10-12 12:27:47: Thread:7084(DETAIL) : Initialize, Category: CAInterfaceInternal Source: CAInterfaceInternal.cpp : CAInterfaceNamespace::CAInterfaceInternal::Init Line: 183: Start CAInterfaceInternal
2018-10-12 12:27:47: Thread:7084(DETAIL) : ACU Configurator, Category: ADInterfaceInternal Source: ADInterfaceInternal.cpp : ADInterfaceNamespace::ADInterfaceInternal::Init Line: 87: Start ADInterfaceInternal
2018-10-12 12:27:47: Thread:7084(DETAIL) : SCS Configurator, Category: Start vProConfiguration Source: vProConfigurationInternal.cpp : vProConfigurationNamespace::vProConfigurationInternal::Init Line: 42:
2018-10-12 12:27:47: Thread:7084(DETAIL) : RCS Server , Category: DmpStorage Source: DmpStorageInternal.cpp : DmpRepositoryNamespace::DmpStorageInternal::Init Line: 32: Start DmpStorage
2018-10-12 12:27:47: Thread:7084(DETAIL) : RCS Server , Category: ProfileStorage Source: ProfileStorageInternal.cpp : ProfileRepositoryNamespace::ProfileStorageInternal::Init Line: 37: Start ProfileStorage
2018-10-12 12:27:47: Thread:7084(DETAIL) : RCS Server , Category: ProfileStorage Source: ProfileAccessorDB.cpp : ProfileRepositoryNamespace::ProfileAccessorDB::GetAll Line: 121: Entering
2018-10-12 12:27:47: Thread:7084(DETAIL) : RCS Server , Category: ProfileStorage Source: ProfileAccessorDB.cpp : ProfileRepositoryNamespace::ProfileAccessorDB::GetAll Line: 124: Exiting
2018-10-12 12:27:47: Thread:7084(DETAIL) : RCS Server , Category: BareMetalHelper Source: BareMetalHelperInternal.cpp : BareMetalHelperNamespace::BareMetalHelperInternal::Init Line: 39: Start
2018-10-12 12:27:48: Thread:1896(INFO) : RCS Server , Category: CA Mediation Plugins Source: CaMediationCOMInterface.cpp : CAInterfaceNamespace::CAMediationComInterface::init Line: 173: RCS failed to load a valid 3rd party Certificate Authority mediation DLL file, so RCS disabled the option. (0xc0003f5e).
2018-10-12 12:27:48: Thread:1896(DETAIL) : RCS Server , Category: CA Mediation Plugins Source: c:\workst\f5ded80e061e568\products\scs\modules\cainterface\CaMediationCOMInterface.h : CAInterfaceNamespace::ProcessManager::TerminateIfFilenameMatches Line: 69: Entering
2018-10-12 12:27:48: Thread:1896(DETAIL) : RCS Server , Category: CA Mediation Plugins Source: c:\workst\f5ded80e061e568\products\scs\modules\cainterface\CaMediationCOMInterface.h : CAInterfaceNamespace::ProcessManager::TerminateIfFilenameMatches Line: 75: Exiting
2018-10-12 12:27:48: Thread:7084(ERROR) : RCS Server , Category: Initial 3rd party CA Mediation DLL. Source: Src\RCSServer.cpp : CServiceModule::Run Line: 1438: RCS failed to load a valid 3rd party Certificate Authority mediation DLL file, so RCS disabled the option. (0xc0003f5e).
2018-10-12 12:27:52: Thread:1916(INFO) : GetRCSVersion, Category: Responding to Get Source For AMT Request Source: Src\RCS_RemoteConfigurationService_WMIProvider.cpp : RCS_RemoteConfigurationService::GetRCSVersion Line: 1992:
2018-10-12 12:27:52: Thread:1932(DETAIL) : RCS Server , Category: JobController Source: Src\JobController.cpp : JobController::run Line: 297: Start
2018-10-12 12:27:52: Thread:1932(DETAIL) : RCS Server , Category: GetJobsByQuery Source: Job.cpp : JobsNameSpace::Job::GetJobsByQuery Line: 662: Start
2018-10-12 12:27:52: Thread:1932(DETAIL) : RCS Server , Category: GetJobsByQuery DATA_NOT_FOUND Source: Job.cpp : JobsNameSpace::Job::GetJobsByQuery Line: 679: Data was not found.
2018-10-12 12:27:52: Thread:1932(DETAIL) : RCS Server , Category: JobController Source: Src\JobController.cpp : JobController::run Line: 322: Iteration
2018-10-12 12:27:52: Thread:1932(DETAIL) : RCS Server , Category: JobController Source: Src\JobController.cpp : JobController::run Line: 352: Next iteration in 86400
2018-10-12 12:27:53: Thread:7084(INFO) : RCS Server , Category: Service Start. Source: Src\RCSServer.cpp : CServiceModule::Run Line: 1520: Run
I'm not sure these lines are "bad" as we do not use our own certificate authority?
On the client system i run the following command as local system and the this in the log:
Command: "acuconfig.exe /output console /output file _status.log status"
2018-10-12 13:05:28:(INFO) : ACU Configurator , Category: HandleOutPut: Starting log 2018-10-12 13:05:28
2018-10-12 13:05:28:(INFO) : ACU Configurator, Category: : ACUConfig 12.0.0.129
2018-10-12 13:05:28:(INFO) : ACU Configurator, Category: -Status-: PC053647.another.domain.name.com: Starting to retrieve machine status...
2018-10-12 13:05:33:(INFO) : ACU Configurator , Category: -AMT Info-: Host information - PC053647.another.domain.name.com UUID - 3FEFA580-A0F2-11E8-B54F-A0AE910A1500 Intel(R) AMT version - 12.0.6.1120 The system is unconfigured. The system TLS setup is using PKI. The system supports host-based configuration. AMT state - Pre-Provision(0) The Embedded Host Based Configuration option is enabled on this system.
2018-10-12 13:05:33:(SUCCESS) : ACU Configurator, Category: Exit: ***********Exit with code 0 - Success.
Command: "acuconfig.exe /output console /output file _SystemDiscovery.log /verbose systemdiscovery /reporttorcs /rcsaddress rcs.domain.com /rcsbusyretrycount 3"
2018-10-12 13:09:50: Thread:3824(INFO) : ACU Configurator , Category: HandleOutPut Source: CmdUtils.cpp : Cmd::HandleOutput Line: 79: Starting log 2018-10-12 13:09:50
2018-10-12 13:09:50: Thread:3824(DETAIL) : ACU.dll, Category: SetCompatibilityMode Source: ACUDll.cpp : SetCompatibilityMode Line: 196: 12.0.0.129
2018-10-12 13:09:50: Thread:3824(DETAIL) : ACU.dll, Category: SetCompatibilityMode Source: ACUDll.cpp : SetCompatibilityMode Line: 228: Set compatibility mode to 10.0.
2018-10-12 13:09:50: Thread:3824(INFO) : ACU Configurator, Category: Source: Src\ActivatorMain.cpp : wmain Line: 372: ACUConfig 12.0.0.129
2018-10-12 13:09:50: Thread:3824(INFO) : ACU Configurator, Category: -System Discovery- Source: Src\ActivatorMain.cpp : wmain Line: 414: PC053647.another.domain.name.com: Starting to discover the system information...
2018-10-12 13:09:50: Thread:3824(DETAIL) : ACU Configurator , Category: -Start- Source: ACUDllWin.cpp : SystemDiscovery Line: 57: ***** Start SystemDiscovery ******
2018-10-12 13:09:50: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : HeciDiscovery Line: 555: Entering
2018-10-12 13:09:50: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : CheckAMT Line: 85: Entering
2018-10-12 13:09:50: Thread:3824(DETAIL) : ACU Configurator , Category: -HECI- Source: HECIWin.cpp : HECIWin::Init Line: 191: Connected to the Intel(R) Management Engine Interface driver, version 12.0.0.2021
2018-10-12 13:09:50: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : FWUpdateData Line: 46: Entering
2018-10-12 13:09:50: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : FWUpdateData Line: 64: Exiting
2018-10-12 13:09:50: Thread:3824(INFO) : ACU Configurator , Category: AMT Mode Source: HECIDiscovery.cpp : CheckAMT Line: 426: Intel(R) AMT in PROVISIONING_MODE_ENTERPRISE
2018-10-12 13:09:50: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetPKIDNSSuffix Line: 960: Entering
2018-10-12 13:09:50: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetPKIDNSSuffix Line: 989: Exiting
2018-10-12 13:09:50: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : CheckAMT Line: 548: Exiting
2018-10-12 13:09:50: Thread:3824(DETAIL) : ACU Configurator , Category: -HECI- Source: HECIWin.cpp : HECIWin::Init Line: 191: Connected to the Intel(R) Management Engine Interface driver, version 12.0.0.2021
2018-10-12 13:09:50: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : FWUpdateData Line: 46: Entering
2018-10-12 13:09:50: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : FWUpdateData Line: 64: Exiting
2018-10-12 13:09:55: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : PKIDiscovery Line: 894: Entering
2018-10-12 13:09:55: Thread:3824(DETAIL) : ACU Configurator , Category: Hash Handle Source: HECIDiscovery.cpp : GetPKIHashes Line: 1052: Hash Handles number:19
2018-10-12 13:09:55: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : PKIDiscovery Line: 942: Exiting
2018-10-12 13:09:55: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetAmtFQDN Line: 1448: Entering
2018-10-12 13:09:55: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetAmtFQDN Line: 1529: Exiting
2018-10-12 13:09:55: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : ConfServerDiscovery Line: 1196: Entering
2018-10-12 13:09:55: Thread:3824(DETAIL) : ACU Configurator , Category: Status message Source: HECIDiscovery.cpp : ConfServerDiscovery Line: 1250: AMT Status code - Essential data is missing from the AMT. (0xc0004a71)
2018-10-12 13:09:55: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : ConfServerDiscovery Line: 1274: Exiting
2018-10-12 13:09:55: Thread:3824(DETAIL) : ACU Configurator , Category: ConfServerDiscovery Source: HECIDiscovery.cpp : HeciDiscovery Line: 809: AMT Status code - An internal error has occurred in the Intel(R) AMT device. This might indicate an interface error, or an application error. (0xc0004269) (ConfServerDiscovery)
2018-10-12 13:09:55: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : ReInitPTHI Line: 1687: Entering
2018-10-12 13:10:00: Thread:3824(DETAIL) : ACU Configurator , Category: -HECI- Source: HECIWin.cpp : HECIWin::Init Line: 191: Connected to the Intel(R) Management Engine Interface driver, version 12.0.0.2021
2018-10-12 13:10:00: Thread:3824(DETAIL) : ACU Configurator , Category: GetPID Source: HECIDiscovery.cpp : HeciDiscovery Line: 816: AMT Status code - An internal error has occurred in the Intel(R) AMT device. This might indicate an interface error, or an application error. (0xc0004269) (GetPID)
2018-10-12 13:10:00: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : ReInitPTHI Line: 1687: Entering
2018-10-12 13:10:05: Thread:3824(DETAIL) : ACU Configurator , Category: -HECI- Source: HECIWin.cpp : HECIWin::Init Line: 191: Connected to the Intel(R) Management Engine Interface driver, version 12.0.0.2021
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : LMSDiscovery Line: 1282: Entering
2018-10-12 13:10:05: Thread:3824(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 432: Calling function Discovery...
2018-10-12 13:10:05: Thread:3824(INFO) : ACU Configurator , Category: Local System Account Source: HostBasedSetup.cpp : HostBasedSetup::GetLocalSystemAccount Line: 217: Calling function GetLocalSystemAccount over MEI...
2018-10-12 13:10:05: Thread:3824(DETAIL) : ACU Configurator , Category: -HECI- Source: HECIWin.cpp : HECIWin::Init Line: 191: Connected to the Intel(R) Management Engine Interface driver, version 12.0.0.2021
2018-10-12 13:10:05: Thread:3824(INFO) : ACU Configurator , Category: Local System Account Source: HostBasedSetup.cpp : HostBasedSetup::GetLocalSystemAccount Line: 255: Function GetLocalSystemAccount over MEI ended successfully
2018-10-12 13:10:05: Thread:3824(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 479: Host Based Setup is supported
2018-10-12 13:10:05: Thread:3824(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 518: Current Control Mode: 0 (Not provisioned)
2018-10-12 13:10:05: Thread:3824(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 557: Allowed Control Modes: 2 (Admin) and 1 (Client)
2018-10-12 13:10:05: Thread:3824(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 561: Function Discovery ended successfully
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : LMSDiscovery Line: 1355: Exiting
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : SecurityDiscovery Line: 1373: Entering
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : SecurityDiscovery Line: 1408: Exiting
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : FeaturesDiscovery Line: 1426: Entering
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : FeaturesDiscovery Line: 1441: Exiting
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : UuidDiscovery Line: 1536: Entering
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : UuidDiscovery Line: 1554: Exiting
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : TcpIpDiscovery Line: 1561: Entering
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : TcpIpDiscovery Line: 1680: Exiting
2018-10-12 13:10:05: Thread:3824(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : HeciDiscovery Line: 874: Exiting
2018-10-12 13:10:08: Thread:3824(DETAIL) : ACU Configurator , Category: SaveToRegstry Source: SystemDiscovery.cpp : MachineDataOp::SystemDiscovery::SaveToRegistry Line: 1082: Success.
2018-10-12 13:10:08: Thread:3824(DETAIL) : ACU Configurator , Category: System Discovery Source: ACUDllWin.cpp : SystemDiscovery Line: 139: System Discovery completed successfully. (0xc0002801)
2018-10-12 13:10:08: Thread:3824(DETAIL) : ACU Configurator , Category: -END- Source: ACUDllWin.cpp : SystemDiscovery Line: 145: ***** END SystemDiscovery ******
2018-10-12 13:10:08: Thread:3824(SUCCESS) : ACU Configurator, Category: Exit Source: Src\ActivatorMain.cpp : configurator::LogAndExit Line: 227: ***********Exit with code 0. Details: Success.
Command: "acuconfig.exe /output console /output file _ConfigViaRCS.log /verbose ConfigViaRCSOnly rcs.domain.com Simple"
2018-10-12 13:12:59: Thread:8368(INFO) : ACU Configurator , Category: HandleOutPut Source: CmdUtils.cpp : Cmd::HandleOutput Line: 79: Starting log 2018-10-12 13:12:59
2018-10-12 13:12:59: Thread:8368(DETAIL) : ACU.dll, Category: SetCompatibilityMode Source: ACUDll.cpp : SetCompatibilityMode Line: 196: 12.0.0.129
2018-10-12 13:12:59: Thread:8368(DETAIL) : ACU.dll, Category: SetCompatibilityMode Source: ACUDll.cpp : SetCompatibilityMode Line: 228: Set compatibility mode to 10.0.
2018-10-12 13:12:59: Thread:8368(INFO) : ACU Configurator, Category: Source: Src\ActivatorMain.cpp : wmain Line: 372: ACUConfig 12.0.0.129
2018-10-12 13:12:59: Thread:8368(INFO) : ACU Configurator, Category: -Unknown Operation- Source: Src\ActivatorMain.cpp : wmain Line: 414: PC053647.another.domain.name.com: Starting to configure AMT via RCS...
2018-10-12 13:12:59: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : CheckAMT Line: 85: Entering
2018-10-12 13:12:59: Thread:8368(DETAIL) : ACU Configurator , Category: -HECI- Source: HECIWin.cpp : HECIWin::Init Line: 191: Connected to the Intel(R) Management Engine Interface driver, version 12.0.0.2021
2018-10-12 13:12:59: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : FWUpdateData Line: 46: Entering
2018-10-12 13:12:59: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : FWUpdateData Line: 64: Exiting
2018-10-12 13:12:59: Thread:8368(INFO) : ACU Configurator , Category: AMT Mode Source: HECIDiscovery.cpp : CheckAMT Line: 426: Intel(R) AMT in PROVISIONING_MODE_ENTERPRISE
2018-10-12 13:12:59: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetPKIDNSSuffix Line: 960: Entering
2018-10-12 13:12:59: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetPKIDNSSuffix Line: 989: Exiting
2018-10-12 13:12:59: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : CheckAMT Line: 548: Exiting
2018-10-12 13:13:01: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetAmtFQDN Line: 1448: Entering
2018-10-12 13:13:01: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetAmtFQDN Line: 1529: Exiting
2018-10-12 13:13:01: Thread:8368(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 432: Calling function Discovery...
2018-10-12 13:13:02: Thread:8368(INFO) : ACU Configurator , Category: Local System Account Source: HostBasedSetup.cpp : HostBasedSetup::GetLocalSystemAccount Line: 217: Calling function GetLocalSystemAccount over MEI...
2018-10-12 13:13:02: Thread:8368(DETAIL) : ACU Configurator , Category: -HECI- Source: HECIWin.cpp : HECIWin::Init Line: 191: Connected to the Intel(R) Management Engine Interface driver, version 12.0.0.2021
2018-10-12 13:13:02: Thread:8368(INFO) : ACU Configurator , Category: Local System Account Source: HostBasedSetup.cpp : HostBasedSetup::GetLocalSystemAccount Line: 255: Function GetLocalSystemAccount over MEI ended successfully
2018-10-12 13:13:02: Thread:8368(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 479: Host Based Setup is supported
2018-10-12 13:13:02: Thread:8368(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 518: Current Control Mode: 0 (Not provisioned)
2018-10-12 13:13:02: Thread:8368(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 557: Allowed Control Modes: 2 (Admin) and 1 (Client)
2018-10-12 13:13:02: Thread:8368(INFO) : ACU Configurator , Category: Discovery Source: HostBasedSetup.cpp : HostBasedSetup::Discovery Line: 561: Function Discovery ended successfully
2018-10-12 13:13:04: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : UuidDiscovery Line: 1536: Entering
2018-10-12 13:13:04: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : UuidDiscovery Line: 1554: Exiting
2018-10-12 13:13:04: Thread:8368(DETAIL) : ACU Configurator , Category: Returned data Source: ACUDll.cpp : GetHostAndMEInfo Line: 4479: GetHostAndMEInfo output data: IsAMT:True, isEnterpriseMode:True, configurationMode:0, isRemoteConfigEnabled:True, AMTversion:12.0.6.1120, isMobile:False, provisioningTlsMode:2, uuid:3FEFA580-A0F2-11E8-B54F-A0AE910A1500, isClientConfigEnabled:True, hostBasedSupport:True, configurationState:0, FQDN:PC053647.another.domain.name.com, embeddedConfigurationAllowed:True. isLANLessPlatform:False. PKIDNSSuffix: Empty.
2018-10-12 13:13:04: Thread:8368(DETAIL) : ACU Configurator , Category: -Start- Source: ACUDll.cpp : RemoteConfiguration Line: 3581: ***** Start RemoteConfiguration ******
2018-10-12 13:13:06: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : TcpIpDiscovery Line: 1561: Entering
2018-10-12 13:13:06: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : TcpIpDiscovery Line: 1680: Exiting
2018-10-12 13:13:08: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetAmtFQDN Line: 1448: Entering
2018-10-12 13:13:08: Thread:8368(DETAIL) : AMT Discovery, Category: HECI Discovery Source: HECIDiscovery.cpp : GetAmtFQDN Line: 1529: Exiting
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: -Start- Source: ACUDll.cpp : StartConfigurationInt Line: 5400: ***** Start StartConfigurationInt ******
2018-10-12 13:13:08: Thread:8368(DETAIL) : StartConfiguration, Category: Enter StartConfiguration Source: ACUDll.cpp : StartConfigurationInt Line: 5407:
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: -HECI- Source: HECIWin.cpp : HECIWin::Init Line: 191: Connected to the Intel(R) Management Engine Interface driver, version 12.0.0.2021
2018-10-12 13:13:08: Thread:8368(INFO) : ACU Configurator , Category: Information message Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 208: Active certificate hashes have the following names: (0xc000005a)
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 209: 19
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: VeriSign Class 3 Primary CA-G1
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: VeriSign Class 3 Primary CA-G3
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Go Daddy Class 2 CA
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Comodo AAA CA
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Starfield Class 2 CA
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: VeriSign Class 3 Primary CA-G2
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: VeriSign Class 3 Primary CA-G1.5
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: VeriSign Class 3 Primary CA-G5
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: GTE CyberTrust Global Root
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Baltimore CyberTrust Root
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Cybertrust Global Root
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Verizon Global Root
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Entrust.net CA (2048)
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Entrust Root CA
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: VeriSign Universal
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Go Daddy Root CA - G2
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Entrust Root CA - G2
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Starfield Root CA - G2
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Hash Handle Source: ZTCLocalAgent.cpp : DiscoveryTest Line: 230: Affirm Trust Premium
2018-10-12 13:13:08: Thread:8368(DETAIL) : ACU Configurator , Category: Status message Source: ZTCLocalAgent.cpp : Activate Line: 566: Activate Intel(R) AMT configuration: (0xc0000050) (Success. )
2018-10-12 13:13:08: Thread:8368(DETAIL) : StartConfiguration, Category: StartConfiguration AMT Source: ACUDll.cpp : StartConfigurationInt Line: 5443: Waiting for FW to move to In-Provision state(0)...
2018-10-12 13:13:15: Thread:8368(DETAIL) : StartConfiguration, Category: Exit StartConfiguration Source: ACUDll.cpp : StartConfigurationInt Line: 5471: The Start configuration operation completed successfully.
2018-10-12 13:13:15: Thread:8368(DETAIL) : ACU Configurator , Category: -END- Source: ACUDll.cpp : StartConfigurationInt Line: 5473: ***** END StartConfigurationInt ******
2018-10-12 13:13:15: Thread:8368(DETAIL) : ACU.dll, Category: GetNetworkSettings Source: ACUDllWin.cpp : LoadNetworkSettings Line: 996: RCSaddress=rcs.domain.com, RCSWMIUser=, RCSProfileName=Simple
2018-10-12 13:13:16: Thread:8368(DETAIL) : NetworkSettingClass, Category: LoadSourceForAMTName Source: NetworkSettingsClass.cpp : NetworkSettings::NetworkSettingClass::LoadSourceForAMTName Line: 576: PC053647.another.domain.name.com
2018-10-12 13:13:16: Thread:8368(DETAIL) : ACU.dll, Category: Configure AMT Source: ACUDllWin.cpp : MI_ConfigAMT Line: 655: RCSaddress=rcs.domain.com, RCSWMIUser=, UUID=3FEFA580-A0F2-11E8-B54F-A0AE910A1500, ConfigMode=2, PID=, RCSProfileName=Simple, AMTVersion=12.0.6.1120, OldADOU=, Configure AMT Name= True. Configure AMT IPv4= True. Source For AMT Name= Host Name- PC053647 Domain Name- another.domain.name.com . Default OS Name= Host Name- PC053647 Domain Name- another.domain.name.com . Host IPv4= IPv4 Address- 10.15.15.137 IPv4 SubNet- 255.255.252.0 IPv4 Gateway- 10.15.12.1 IPv4 Primary DNS- 10.253.128.70 . Configure AMT IPv4 to DHCP mode= True.
2018-10-12 13:13:16: Thread:8368(INFO) : ACU Configurator , Category: WMI Access Layer Source: WMIAccess.cpp : WMI_IsRcsBusy Line: 683: Success. (0) (retry set to = 0)
2018-10-12 13:13:16: Thread:8368(INFO) : ACU Configurator , Category: WMI Access Layer Source: WMIAccess.cpp : WMI_IsRcsBusy Line: 759: Success. (0) (RCS not busy.)
2018-10-12 13:13:16: Thread:8368(INFO) : ACU Configurator , Category: WMI Access Layer Source: WMIAccess.cpp : WMI_IsRcsBusy Line: 783: Success. (0) (RCS is currently handling = 0 threads)
2018-10-12 13:13:17: Thread:8368(DETAIL) : ACU Configurator , Category: -END- Source: ACUDll.cpp : RemoteConfiguration Line: 3879: ***** END RemoteConfiguration ******
2018-10-12 13:13:17: Thread:8368(ERROR) : ACU Configurator, Category: Exit Source: Src\ActivatorMain.cpp : configurator::LogAndExit Line: 227: ***********Exit with code 75. Details: Failed to complete remote configuration of this Intel(R) AMT device. Failed while calling WS-Management call GetAmtVersion (CIM_SoftwareIdentity.Get). Intel(R) AMT connection error 0xc000521f: An SSL error occurred. Verify the username and password, and the PSK or certificate settings, where applicable. Valid certificate for PKI configuration not found.
Any input is very welcome, as i'm currently in a state where I'm ripping my hair out on this
Does anyone know if i can use a provisioning certificate with CN rcs.something.com and the local pc is joined to a domain named something.else.com ? Or does the provisioning certificate CN need to be rcs.comething.else.com?