I'm having a problem provisioning Intel AMT 11.x devices.
It's a relatively new setup with SCS. I've been able to provision AMT 7.x, 9.x devices without much problems. I'm using host-based configuration running "ACUConfig.exe ConfigAMT profile.xml /DecryptionPassword xxxxxxx" to do it.
For the 7.x and 9.x machines I saw the "Wire support 1 **************" messages in the ACUConfig logs, and the provisioning completed successfully.
With the 11.x machines we just got (ASUS Q270M-C motherboards), when I try to provision them I get an error in the log about the certificate.
2017-12-15 10:51:27:(INFO) : ACU Configurator , Category: HandleOutPut: Starting log 2017-12-15 10:51:27
2017-12-15 10:51:27:(INFO) : ACU Configurator, Category: : ACUConfig 11.2.0.35
2017-12-15 10:51:27:(INFO) : ACU Configurator, Category: -Unknown Operation-: HOSTNAME.FQDN: Starting to configure AMT...
2017-12-15 10:52:34:(INFO) : ACU Configurator , Category: Information message: Active certificate hashes have the following names: (0xc000005a)
2017-12-15 10:52:35:(INFO) : ACU Configurator , Category: Information message: Active certificate hashes have the following names: (0xc000005a)
2017-12-15 10:52:42:(INFO) : ACU Configurator , Category: WMI Access Layer: Success. (0) (retry set to = 0)
2017-12-15 10:52:43:(INFO) : ACU Configurator , Category: WMI Access Layer: Success. (0) (RCS not busy.)
2017-12-15 10:52:43:(INFO) : ACU Configurator , Category: WMI Access Layer: Success. (0) (RCS is currently handling = 0 threads)
2017-12-15 10:52:44:(ERROR) : ACU Configurator , Category: ConfigAMT failed: A call to this function has failed - (0xc000278b) (Failed while calling WS-Management call GetAmtVersion (CIM_SoftwareIdentity.Get). Intel(R) AMT connection error 0xc000521f: An SSL error occurred. Verify the username and password, and the PSK or certificate settings, where applicable. (0xc000521f). )
2017-12-15 10:52:44:(ERROR) : ACU Configurator, Category: Exit: ***********Exit with code 74. Details: Failed to complete the Setup operation on this Intel(R) AMT device. The status of Intel(R) AMT on the system might have changed. Use the "Status" command to see the current system configuration. Failed while calling WS-Management call GetAmtVersion (CIM_SoftwareIdentity.Get). Intel(R) AMT connection error 0xc000521f: An SSL error occurred. Verify the username and password, and the PSK or certificate settings, where applicable. Valid certificate for PKI configuration not found.
The cert has been added to the PKI configuration in MEBx setup, remote configuration is enabled, etc. I can't figure out what the error is. I've tried enabled verbose logging but that wasn't helpful either. Any ideas would be greatly appreciated.