MeshCentral - Intel AMT Configuration and CIRA

แชร์
ฝัง
  • เผยแพร่เมื่อ 30 พ.ย. 2024

ความคิดเห็น • 18

  • @laszloperesztegi
    @laszloperesztegi 2 ปีที่แล้ว +1

    Will CIRA mode work with hardware KVM too? (to configure BIOS settings via external Internet connection remotely)

    • @MeshCentral
      @MeshCentral  2 ปีที่แล้ว +1

      Yes. Once CIRA is setup, all of the Intel AMT features are available including KVM.

  • @ruralmagic4456
    @ruralmagic4456 2 ปีที่แล้ว +1

    I perform 'meshcmd amtinfo' command,the result:'Unable to perform MEI operations, try running as administrator.', coundn't execute correctly,why?

    • @MeshCentral
      @MeshCentral  2 ปีที่แล้ว +1

      One option is that you are not running it within an administrator shell, the other option is that your computer does not have the Intel Management Engine. Also, look for "Intel Management Engine" driver under the "System" section of the device manager. If the driver is missing, that could be another issue.

  • @dinargalimov2030
    @dinargalimov2030 2 ปีที่แล้ว +1

    Hello. This is a really interesting video. I am very interesting what is the difference between MeshCentral and Intel EMA?
    Currently our company is testing Intel EMA. DHCP option #15 is configured on subnet. And what I see doing my tests it’s that CIRA can’t establish any connection and activate Intel AMT using built-in WIfi, without set corresponding DNS PKI suffixes trough to MEBx menu.

    • @MeshCentral
      @MeshCentral  2 ปีที่แล้ว +1

      Good question. MeshCentral and Intel EMA have a lot of similarities, this is not an accident. Intel EMA got started using my previous MeshCentral v1 code base that was C#/ASP.net/MSSQL and has been improved a lot since. MeshCentral is a re-rewrite using NodeJS/ExpressJS/MongoDB. Obviously, there are offered under very different licenses and support models, etc.
      For Intel AMT activation, Option 15 only works on the wired interface and, due to security, is ignored on the wireless interface. As a result, you can't perform Option 15 ACM activation of Intel AMT on laptop devices that only have WIFI. Like Intel EMA, MeshCentral will have the same issue since it's a restriction of Intel AMT. If you setup a USB key (setup.bin file) with MeshCentral, the key will set the FQDN and trusted cert hash so you don't have to do it in MEBx, but that is about the best you can do to get to ACM. Hope that makes sense.

    • @dinargalimov2030
      @dinargalimov2030 2 ปีที่แล้ว +1

      @@MeshCentral! So, this means that the only way to activate Intel AMT remotely it’s using wired connection with DHCP option 15. But another challenge is that almost all new enterprise laptops are coming without RJ-45 port on-board and we have to consider to buy a Thunderbolt 4 dock stations to be able activate Intel AMT.
      For me it very interesting to test MeshCentral and compare it with Intel EMA. I like Mesh Commander more than Intel Manageability commander. Has MeshCentral a free trial or something like that? If yes, could you please corresponding docs how to get it? Thank you in advance.
      P.S. Host Based Activation (setup.bin) is not suitable for us.

    • @MeshCentral
      @MeshCentral  2 ปีที่แล้ว +1

      Your correct that the only truly remote way to activate into ACM is option 15 using the wired interface. Newer versions of Intel AMT do allow option 15 using a RJ-45 with a Thunderbolt dock, but make sure to test this for the specific computers you have. I have not personally tried it, but I think it should work. Buying a USB RJ-45 adapter or other other wired adapter or USB docks will NOT work since these Ethernet adapters are not managed by Intel AMT.
      MeshCentral is a community-supported, open source remote management web site. Take a look at meshcentral.com for details. It's not a trial, it's fully free with source code on GitHub and obviously, you found the TH-cam channel that covers everything MeshCentral. You can look at the 2 first videos on this channel for "installation" and "Basics" to get started.

    • @dinargalimov2030
      @dinargalimov2030 2 ปีที่แล้ว +1

      @@MeshCentral Thanks! It’s a good point to start do some tests with MeshCentral.
      Thank you very much for sharing your video content with us! I appreciate it.

    • @MeshCentral
      @MeshCentral  2 ปีที่แล้ว

      There is an active community at github.com/Ylianst/MeshCentral/issues and github.com/Ylianst/MeshCentral/discussions, feel free to post questions and feedback. I am also on Telegram t.me/meshcentral

  • @silversword411
    @silversword411 2 ปีที่แล้ว +1

    What's the reason AMT won't activate if using wildcard certs?

    • @MeshCentral
      @MeshCentral  2 ปีที่แล้ว +1

      They want to make sure you know know exactly who is activating Intel AMT and so, wildcard certificates would not be the most secure for this usage.

  • @hobbiesworld1287
    @hobbiesworld1287 2 ปีที่แล้ว +1

    Showing cira time out , what to do that it doesn't show cira time out while opening my laptop

    • @MeshCentral
      @MeshCentral  2 ปีที่แล้ว

      Hi. I am not sure what you are referring to and what CIRA settings you have, but I if you can open an issue on GitHub here: github.com/Ylianst/MeshCentral/issues. Add a picture of the error and I can look into it. TH-cam comments are not great for this type of bug reports. Thanks.

  • @veitw5493
    @veitw5493 3 ปีที่แล้ว +2

    Great video, thank you!

    • @MeshCentral
      @MeshCentral  3 ปีที่แล้ว

      My pleasure! Glad you liked it.

  • @bbrendon
    @bbrendon 2 ปีที่แล้ว +1

    Most of your videos are great but this one I think assumes you know too much about AMT to be useful for an AMT beginner.

    • @MeshCentral
      @MeshCentral  2 ปีที่แล้ว

      You are right, Intel AMT is a big topic on it's own.