4 Replies Latest reply on Apr 1, 2010 2:06 PM by mmccartymok

    Pc doesn't get provisioned ussing certificates.

    Rookie

      Hi all,

       

      I’m performing a project to activate the Vpro.

       

      I'm using Landesk 8.8 SP3 and I would like you to ask for help because I’m having some issues trying to provision the pc’s.

       

      Could you please help me with the log file?

       

      I have the AMTProvMgr2 log file, in where you can see an error related with the use of the default credential (I believe), and the pc doesn’t get provisioned, and I don’t know why is happening this error.

       

      Thu, 14 Jan 2010 10:54:46 LANDesk Intel AMT Provisioning Manager

      Thu, 14 Jan 2010 10:54:46 IP: 192.168.39.37      UUID: C5E432A8-64F5-3CDE-8A91-6A17C816E916

       

      Thu, 14 Jan 2010 10:54:46 No FQDN hostname from DNS, use default

      Thu, 14 Jan 2010 10:54:46 Host Name: CL037062

       

      Thu, 14 Jan 2010 10:54:46 PID: 00000000

       

      Thu, 14 Jan 2010 10:54:47 user cert 1 exists

       

      Thu, 14 Jan 2010 10:54:48 soap_ssl_client_context() return: 0

      Thu, 14 Jan 2010 10:54:48 Action: getCoreVersion

      Thu, 14 Jan 2010 10:54:48 Error: GetCoreVersion failed (status: 0x0000, res: 0x001a)

      Thu, 14 Jan 2010 10:54:48 SOAP 1.1 fault: SOAP-ENV:Client [no subcode]

      Thu, 14 Jan 2010 10:54:48 "SSL_ERROR_SSLerror:14094438:SSL routines:SSL3_READ_BYTES:tlsv1 alert internal error"Detail: SSL connect failed in tcp_connect()

       

      Thu, 14 Jan 2010 10:54:48 Current password failed, use default credentials (AMT 3.0, res: 0x1a)

      Thu, 14 Jan 2010 10:54:48 Action: getCoreVersion

      Thu, 14 Jan 2010 10:54:48 Error: GetCoreVersion failed (status: 0x0000, res: 0x001a)

      Thu, 14 Jan 2010 10:54:48 SOAP 1.1 fault: SOAP-ENV:Client [no subcode]

      Thu, 14 Jan 2010 10:54:48 "SSL_ERROR_SSLerror:14094438:SSL routines:SSL3_READ_BYTES:tlsv1 alert internal error"Detail: SSL connect failed in tcp_connect()

       

      Thu, 14 Jan 2010 10:54:48 Protocol https fails(URL: https://192.168.39.37:16993), use http

       

      Thu, 14 Jan 2010 10:54:48 Action: getCoreVersion

      Thu, 14 Jan 2010 10:55:39 Error: GetCoreVersion failed (status: 0x0000, res: 0x0018)

      Thu, 14 Jan 2010 10:55:39 SOAP 1.1 fault: SOAP-ENV:Client [no subcode]

      Thu, 14 Jan 2010 10:55:39 "Timeout"Detail: connect failed in tcp_connect()

       

      Thu, 14 Jan 2010 10:55:39 getCoreVersion() for AMT 3.0 failed, res: 0x18)

       

      Thu, 14 Jan 2010 10:55:39 Error: SetProvisioningParameters() failed

       

      Thu, 14 Jan 2010 11:05:20 Error: input parameters are not well formated, fail!!!

       

      Thu, 14 Jan 2010 11:05:20 Error: input parameters are not well formated

       

       

      So please If you could help would be grate.

       

      Thenk you very much.

       

      Best Regards.

       

      Hugo.

        • 1. Re: Pc doesn't get provisioned ussing certificates.
          Expert

          that error can be misleading I see that in logs for successful provisions.

           

          what version of AMT are you using?  What cert vendor did you use?  Do you have option 15 set in DHCP and what is it set?

           

          one other thing you can try is to delete a couple folders under the managementuite\amtprov\certgenerator\secscripts the rootca and subca folders.  They are dynamic and will be recreated after deletion.

          1 of 1 people found this helpful
          • 2. Re: Pc doesn't get provisioned ussing certificates.
            Rookie

            Hi Rex,

             

            first of all thank you very much for your answer.

             

            The AMT that I am ussing are 3.0 and 5.0.

             

            For the option 15 in the DHCP I have told to the customer the first time that I went to his office that we need to have it, so I will check during his week, but 100% sure that the option 15 is activated. And i will delete the rootca and subca folders as you have said in the answer in a cuple of days.

             

            But I would like you to ask about the possible paths that I need to install in the Landesk 8.8 with the SP-3. I have been looking in the web and I have seen that you need these.

             

            But I don't know if I am correct, or I don't need any path to get the pc's provisioned

             

            • 3. Re: Pc doesn't get provisioned ussing certificates.
              Expert

              the three links you have there 2 of them are the same patch.  The AMT rollup patch has all the changes and patches to AMT/vPro since the sp3 release.  The other link is a dependency that needs to be installed before any other LANDesk patch gets installed.

               

              not sure I understand the question about paths.  Once the certs are in the correct location and the vPro password set in the LANDesk console machines should start to provision if the option 15 matches the domain that is in the certificate.

              • 4. Re: Pc doesn't get provisioned ussing certificates.
                Rookie

                I am getting the same errors with some of my VPro machines. Did you ever find a solution to this?

                 

                Thu, 01 Apr 2010 14:53:49 LANDesk Intel AMT Provisioning Manager

                Thu, 01 Apr 2010 14:53:49 IP: 10.86.1.38 UUID: EBE074EE-34BF-4A5A-82AB-AAA2BB21D8A7

                 

                Thu, 01 Apr 2010 14:53:49 FQDN hostname form DNS: idbo.domain.com (domain.com)

                Thu, 01 Apr 2010 14:53:50 Host Name: 4407728-0001

                Thu, 01 Apr 2010 14:53:50 PID: 00000000

                 

                Thu, 01 Apr 2010 14:53:50 user cert 1 exists

                 

                Thu, 01 Apr 2010 14:53:53 soap_ssl_client_context() return: 0

                Thu, 01 Apr 2010 14:53:53 Action: getCoreVersion

                Thu, 01 Apr 2010 14:54:43 Error: GetCoreVersion failed (status: 0x0000, res: 0x0018)

                Thu, 01 Apr 2010 14:54:43 SOAP 1.1 fault: SOAP-ENV:Client [no subcode]

                Thu, 01 Apr 2010 14:54:43 "Timeout"

                Detail: connect failed in tcp_connect()

                 

                Thu, 01 Apr 2010 14:54:43 Current password failed, use default credentials (AMT 3.0, res: 0x18)

                Thu, 01 Apr 2010 14:54:43 Action: getCoreVersion

                Thu, 01 Apr 2010 14:55:33 Error: GetCoreVersion failed (status: 0x0000, res: 0x0018)

                Thu, 01 Apr 2010 14:55:33 SOAP 1.1 fault: SOAP-ENV:Client [no subcode]

                Thu, 01 Apr 2010 14:55:33 "Timeout"

                Detail: connect failed in tcp_connect()

                 

                Thu, 01 Apr 2010 14:55:33 Protocol https fails(URL: https://10.86.1.38:16993), use http

                 

                Thu, 01 Apr 2010 14:55:33 Action: getCoreVersion

                Thu, 01 Apr 2010 14:56:24 Error: GetCoreVersion failed (status: 0x0000, res: 0x0018)

                Thu, 01 Apr 2010 14:56:24 SOAP 1.1 fault: SOAP-ENV:Client [no subcode]

                Thu, 01 Apr 2010 14:56:24 "Timeout"

                Detail: connect failed in tcp_connect()

                 

                Thu, 01 Apr 2010 14:56:24 getCoreVersion() for AMT 3.0 failed, res: 0x18)

                 

                Thu, 01 Apr 2010 14:56:24 Error: SetProvisioningParameters() failed

                 

                 

                Thu, 01 Apr 2010 14:56:39 LANDesk Intel AMT Provisioning Manager

                Thu, 01 Apr 2010 14:56:39 IP: 10.86.1.38 UUID: EBE074EE-34BF-4A5A-82AB-AAA2BB21D8A7

                 

                Thu, 01 Apr 2010 14:56:39 FQDN hostname form DNS: idbo.domain.com (domain.com)

                Thu, 01 Apr 2010 14:56:41 Host Name: 4407728-0001

                Thu, 01 Apr 2010 14:56:41 PID: 00000000

                 

                Thu, 01 Apr 2010 14:56:41 user cert 1 exists

                 

                Thu, 01 Apr 2010 14:56:45 soap_ssl_client_context() return: 0

                Thu, 01 Apr 2010 14:56:45 Action: getCoreVersion

                Thu, 01 Apr 2010 14:57:35 Error: GetCoreVersion failed (status: 0x0000, res: 0x0018)