If you are having difficulties logging on your Intel AMT WebUI or your management console is returning errors when you try to connect, here are some things you can check:
- Does the Intel AMT client respond to ping?
- If your AMT Client is pre-AMT 6 are you connecting from a remote system? (Local connections are not allowed pre-AMT 6.2)
- Are there firewalls on the server or client that may be blocking the traffic?
- You are able to log on to the MEBx but not onto the WebUI or vice versa, it is possible that the AMT user/admin password was changed and therefore no longer synced with the MEBx password. For more information on the two different passwords see: The basics of Intel AMT Passwords.
- Are you using Kerberos? See some tips below for issues you may have with kerberos authentication.
- AMT client is configured but management console can not access system via APIs (this could be a password syncing issue - has the User/Admin password changed?
- There could also be a keyboard issue (american and international keyboards have characters in different locations.) Check out the following blog for more detail. Example of a keyboard/password issue is:
- MEBx password was created on 101 Keyboard: P@ssw0rd
- Let's say the IT admin uses a 106(Japanese) keyboard.
- P@ssw0rd on the 101 keyboard is P[ssw0rd on the 106 keyboard
The first time you sign on to the MEBx, you will be asked to change the password. When an Intel AMT System is in Factory Mode, the default password is "admin". Intel AMT requires a strong password so when you change it, make sure you choose a password that meets the following requirements:
- Passwords must contain 7-bit ASCII characters, in the range of 32-126, excluding ‘:’, ‘,’ and ‘”’ characters. String length is limited to 32 characters.
- At least 8 characters long.
- Contain at least one digit ('0', '1'…'9').
- Contain at least one 7-bit ASCII non alpha-numeric character, above 32, (e.g. '!', '$', '~'). Note that “_” is considered alphanumeric.
- Contain both lower-case Latin ('a', 'b'…'z') and upper case Latin ('A', 'B'…'Z') characters.
- A Kerberos Security Identifier (SID) is a byte array between 1 and 28 bytes. The SID length should be a multiple of 4.
The MEBX cannot be set up for kerberos. You need to access it via the "admin" username with the password that you initially changed it to when you first enabled AMT. None of your other usernames will work for the MEBx.
For kerberos and IE, there is an advanced settings (Go to Internet Options--> Advanced -- look at the settings under "Security):
Enable Integrated Windows Authentication - if this box is checked, it will automatically try to log on with your normal user credentials - not your AMT user credential.
When you do try to log on - make sure you are signing on with your domain included: domain\username , for example.
You can also read more about setting your system up for kerberos authentication in the Implementation and reference guide.
I hope this helps. If not, please post a question on our Discussion Forum.
If you are new to Intel AMT, please take look at the Intel AMT Start Here Guide.