SDK Resources > User Consent Tool > User Consent Tool Flow

User Consent Tool Flow

The following steps describe how an IT technician can connect to a remote Intel AMT system using the User Consent Tool.

1.  Double-click the UCT.exe file. The Connection Settings window appears.

2.  Define the settings that will be used to connect to the remote Intel AMT system (see Connection Settings Window).

3.  Click Connect. The following window appears while the User Consent Tool attempts to connect to the remote Intel AMT system.

When trying to connect to the system using TLS, if the host name defined in the Intel AMT device does not match the host name defined in the host operating system, the following window appears.

You can select whether you want to continue and connect to the system, or cancel the connection. You can also click View Certificate to display the certificate.

When connection is established, the Connection Settings window closes and the main window of the User Consent Tool appears (see Main Window).

4.  Click Start Consent. The remote Intel AMT generates the user consent code and attempts to display a sprite with a user consent code.  The Timeout section displays for how long the user consent code is valid (in minutes) and starts to count down to zero.   

 Note:

From Intel AMT Release 7.0, you can define for how long the user consent code is valid (see Advanced Tab).

 

The User Consent Tool polls the Intel AMT system to determine if the user consent code has been displayed to the remote user. Note that the Intel AMT system will not go into a sleep state (Moff) while the tool continues to poll it.

One of the following will occur:

   If a sprite was displayed to the remote user, the Consent State field value changes to Displayed. Continue to step 6.

   If, after ~15 seconds, the Consent State status does not change to Displayed this indicates that Sprites are not supported. Continue to step 5.

5.  If sprites are not supported on the remote Intel AMT system, the Intel AMT system must be rebooted to display the user consent code.  The type of message displayed and the options available depend on the network interface.

   If the connection is via a wired interface or in a wireless interface on a Release 8.1 or later Intel AMT system:

If this message is displayed, click Yes to close the message and reboot the remote Intel AMT system.

   If the connection is via a wireless interface on a pre-8.1 release Intel AMT system:

To remain connected via a wireless connection during reboot, control of network connections on the system must be passed to the Intel AMT Manageability Engine (by changing the “Link Preference” of the Intel AMT system to “ME”). Select one of the following options:

   Yes – Set the link preference to ME and reboot the system.

   No – Set the link preference to ME and do NOT reboot the system.

   Cancel – Cancel the user consent process (make no changes).

 Note:

   If no wireless profiles exist in the Intel AMT device (user defined or IT defined), the User Consent Tool will cancel the user consent process.

   If there is an SSID mismatch, and only IT defined profiles exist, the User Consent Tool will cancel the user consent process since it definitely cannot reconnect with same IP. If user defined profiles exist, you will be asked if you want to continue (reconnection with the correct IP is not guaranteed.)

 

If you selected to reboot the system, the User Consent Tool displays the Graceful Shutdown window while the system is rebooted.

When the remote Intel AMT system reboots, the user consent code is displayed to the remote user by the MEBx.

6.  When the Consent State has changed to Displayed, the Send button in the Operations tab Code section is enabled. Enter the code that the remote user communicated to you and click Send. (To view the code that you entered, select view code.) When the code is verified by the remote Intel AMT, the User Consent Tool displays the following message:

7.  Click OK. The Operation Information window closes. You can now start a redirection session on the remote Intel AMT system. The redirection session must start within the OptInCodeTimeout value. The remaining time is displayed in the Timeout section of the Operations tab.

 Note:

For detailed information about the options and parameters available in the User Consent Tool, see the following:

   Connection Settings Window

   Main Window

   Advanced Tab

   Status Tab

   Settings Tab

Copyright © 2006-2022, Intel Corporation. All rights reserved.