Intel vPro® Platform
Intel Manageability Forum for Intel® EMA, AMT, SCS & Manageability Commander
2827 Discussions

Access to the Intel® vPro™ Web UI with Active Directory User IDs

ÉGagn
Beginner
1,599 Views

My problem is:

When I attempt to log

 

on to the Intel AMT WebUI using a web browser,

 

the logon box prompts for a domain-based credential (domain\user with

 

associated password). The same credentials work correctly with VNC Viewer.

 

When I Deselect the IE option Enable Integrated Windows Authentication

 

I am able to log with the admin and the mebx password. I want use the

 

active directory for Web Ui authentication.

My computer settings:

Windows 8.1 and IE11

My SCSnsole

 

version 11

My amt version 9.1.20 intel

 

vpro

I look this kb http://support.microsoft.com/kb/908209 http://support.microsoft.com/kb/908209 but is a very old kb.

Some people can help me

 

please?

Thanks

Eric

0 Kudos
1 Solution
Dariusz_W_Intel
Employee
686 Views

You need to add one of following registry keys on each Intel AMT console system :

For 32 Bit: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209\"iexplore.exe"=dword:00000001

For 64 Bit: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209\"iexplore.exe"=dword:00000001

 

Use following command to add them:

REG ADD "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209" /v iexplore.exe /t REG_DWORD /d 00000001

REG ADD "HKLM\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209" /v iexplore.exe /t REG_DWORD /d 00000001

You have to use FQDN of vPro system when connecting to it (not just IP addess).

 

Remeber to not manually (or via AD scripts) alter or remove $iME AD computer objects in additional AD OU you created and used for Intel AMT Active Directory Integration in AMT profile!!!

 

Please see more explanation : https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments/usingactivedirectorytomanageintelamtdevices.htm https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments/usingactivedirectorytomanageintelamtdevices.htm and

http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments/notesandlimitations.htm http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments/notesandlimitations.htm

Regards

Dariusz Wittek

Intel EMEA | Biz Client Solution Architect

View solution in original post

0 Kudos
2 Replies
Dariusz_W_Intel
Employee
687 Views

You need to add one of following registry keys on each Intel AMT console system :

For 32 Bit: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209\"iexplore.exe"=dword:00000001

For 64 Bit: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209\"iexplore.exe"=dword:00000001

 

Use following command to add them:

REG ADD "HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209" /v iexplore.exe /t REG_DWORD /d 00000001

REG ADD "HKLM\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INCLUDE_PORT_IN_SPN_KB908209" /v iexplore.exe /t REG_DWORD /d 00000001

You have to use FQDN of vPro system when connecting to it (not just IP addess).

 

Remeber to not manually (or via AD scripts) alter or remove $iME AD computer objects in additional AD OU you created and used for Intel AMT Active Directory Integration in AMT profile!!!

 

Please see more explanation : https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments/usingactivedirectorytomanageintelamtdevices.htm https://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments/usingactivedirectorytomanageintelamtdevices.htm and

http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments/notesandlimitations.htm http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/default.htm?turl=WordDocuments/notesandlimitations.htm

Regards

Dariusz Wittek

Intel EMEA | Biz Client Solution Architect

0 Kudos
Reply