Intel® Software Network

Hi there

 

I have installed a server with this configuration:

-Windows Server 2003 EE

-SQL Server 2006 Enterprise Edition

-.Net Framework 2.0

-IIS 6.0

The SCS Main Server and all other componentes are running in this server without HTTPS forced. The troubles are:

-When I try to connect to https://ServerName/AMTSCS I got the error: Login Failed. Reason: Unable to connect to the remote server

-When I try to connect to http://ServerName/AMTSCS) I got the error: Login Failed. Reason: The request failed with HTTP status 401: Unauthorized.

I have debugged the console with source code and the exception is the same; I've seen in code that web service connection mode is HTTP digest with default credencials, so I've tried to connect locally and remotely with different users but results don't vary.

Many thanks and waiting for your help.

 

Javier Andrés

Hi,

A couple of questions - is your OS 32 or 64 bit? Which version of SCS are you using?

I remember seeing a similar issue while I was trying to use a previous version of SCS with 64 bit Win2003 server.

Thanks,

Sree

Hi Sree,

The OS is 32 bit
The SCS version is 3.3.1.4.0
The server is in a workgroup (not connected to AD)

Thanks,

Javier Andrés

Hi,

Hello Sree,

As I said before, the SCS Main service was installed without HTTPS forced (so, I didn't install security
certificates) and the server is in a workgroup not in a domain (that's why I tried to do a local connection -with the console installed on the same server-), so the complete server name it's the same (without XXX.com).

Thanks and waiting for your reply.

Javier Andrés

Hi,

Does this user have the right permission to run the service? You should allow the user to have this permission while installing SCS. Also, is the AMT Config service running on your system?

Thanks,

Sree

Hello Sree,

The user that SCS is using is a local administrator and as I said in my first post the service is running.

Many thanks,

Hi,

I have forwarded your question to the SCS support team. Waiting for their answer.

BTW, are you using the same system for SCS and Director? If so, there could be an issue with the port - both will be using 9971.

Thanks,

Sree

Hello Sree,

No, I'm not using the same system for SCS and Director.

Many thanks and waiting for your reply,

Javier Andrés

Hi,

I found out from the SCS support team that SCS will not work on a Workgroup (without AD).

Thanks,

Sree

Hi Sree,

I've joined the server in a domain and I'm accessing using an admin user (from AD) and results didn't vary.

Thanks,

Javier Andrés

Hi,

We are working on this. Will get back to you soon.

BTW, do you have any firewall running on the system?

Thanks,

Sree

Hi Sree,

No, I have no blocking software running on the server.

Thanks & waiting for your reply,

Javier Andrés

Hello Sree,

I write you just for keeping the thread alive.

We're still having the problems and waiting for some help .

Many thanks,

Javier Andrés

Hi,

You have joined the server to the domain AFTER the SCS was installed. As a result, you now have an SCS installed with a local (workgroup) user and that’s the only user that currently can login the SCS server (after login he will be able to grant permissions to other users to login), because this is a local user and SCS doesn’t support that so even this specific user can’t login.

So, you will now have to uninstall the current SCS and then install the SCS server while logged on with AD user, so the SCS service user will be this AD user. After the SCS installation complete, you will be able to login the SCS (and grant any other AD user to logon the SCS).

 Let us know how it goes.

Thanks,

Sree

 

Hello Sree,

I have uninstalled the SCS service and installed again logged on with an AD user (with the local admin user I granted admin permission to this user on this machine) and results are the same:

---------------------------
Login Failure
---------------------------
Login Failed

 

Reason: Unable to connect to the remote server
---------------------------
OK  
---------------------------

I have installed with and wihtout HTTPS forced and the error is the same (then, error is not cause certificates).
When I ran the console it's with the same user I installed.

Thanks,

Javier Andrés

Hi,

Could you send us the log files? You can turn on logging by modifying Registry at:

HKLM\Software\Intel\AMTConfServer\LOG – create string value LogLevel and modify its value to V

The files will be located at the root of C:\ and are called scs_server.log and scs_win_server.log

Thanks,

Sree

Hello Sree,

I have seen the log file and I understand that user acaceres does not have privilege to run SCS service; this is a AD user with admin permissions on the server running SCS service.

Is required the user to be an Active Directory admin (I mean, to be part of the domain admin group and NOT machine admin -local admin-)?

Many thanks,

Javier Andrés

Hi,

The SCS user should have "Create/Delete AMT Object permissions". Please refer to page 12 in the the SCS Installation and user manual.

Thanks,

Sree

Hello Sree,

Sorry for delay, but We setup the server as a domain controller for test and  I create a new test domain. After that, I have installed the SCS service and the console logged on as an AD user (member of Domain Administrators and Administrators group).

After that I tried to create instances of Intel-Management-Engine but I haven't find such as classes (I looked for them with the schmmgmt.dll mmc snap-in) and then I haven´t been able to create required permissions (specified in page 45 -I mean I don't see the intel amt objects shown in that page-).

Many thanks I waiting for your help,

Javier Andres

Hi,

You have to be a part of AD and have to be a local admin on the server running the SCS. You cannot run the SCS server on the DC since you do not have local admins on the DC. You have to extend the schema on the AD as described in the User Guide page 37-38.

Thanks,

Sree

 

Hi Sree,

Sorry for delay but We've started the process again with SCS 5.0; I have complete all the requiered steps shown in the Instalation Guide I'm now in optional steps.
I'm extending the AD schema to support AD ntegration and I'm getting a trouble running the provided script.

So I have opened a new thread for solving this specific issue here:
http://softwarecommunity.intel.com/isn/Community/en-US/forums/30259844/ShowThread.aspx#30259844

Many thanks for your help,

Javier Andrés