Hey guys, I have configured OOB on this native mode primary server (2007 SP2 R3) and running into some TLS connection issues. I have successfully provisioned 3 machines (in-band) using the third-party certificate and the in-house PKI web-server certificate template. Using the browser I can access the AMT WebGUI on these machines without certificate errors. I can power on and off, restart or view system info/logs on these machines (using either OOB console or through collection menu). I run into problems when attempting to open Serial-over-Lan connection or perform an IDE-Redirection on all three of these machines. The three machines are AMT 4.x, 6.x and 7.x. oobconsole.log says: [6][6/15/2011 1:01:40 PM] :System.Management.ManagementException\r\nInvalid parameter \r\n at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode) at System.Management.ManagementPath.SetWbemPath(IWbemPath wbemPath, String path) at System.Management.ManagementPath.CreateWbemPath(String path) at System.Management.ManagementPath..ctor(String path) at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.GetInstance(String objectPath)\r\nManagementException details: [11][6/15/2011 1:01:45 PM] :RefreshAmtSystemAuditLogs fail with result:0x80338032 [5][6/15/2011 1:06:28 PM] :AmtPowerControl with state = MasterBusReset fail with result:0x800703E3 [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession2 with user = CONTOSO\admin fail with result:0x20, description:Failed to Establish TLS Connection [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession fail with result:0x00000020. [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession2 with user = CONTOSO\admin fail with result:0x20, description:Failed to Establish TLS Connection [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession fail with result:0x00000020. [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession2 with user = CONTOSO\admin fail with result:0x20, description:Failed to Establish TLS Connection [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession fail with result:0x00000020. [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession2 with user = CONTOSO\admin fail with result:0x20, description:Failed to Establish TLS Connection [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession fail with result:0x00000020. [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession2 with user = CONTOSO\admin fail with result:0x20, description:Failed to Establish TLS Connection [5][6/15/2011 1:08:08 PM] :IMR_SOLOpenTCPSession fail with result:0x00000020. [11][6/15/2011 1:09:39 PM] :IMR_SOLOpenTCPSession2 with user = CONTOSO\admin fail with result:0x20, description:Failed to Establish TLS Connection [11][6/15/2011 1:09:39 PM] :IMR_SOLOpenTCPSession fail with result:0x00000020. The 0x20 error is apparently because the kerberos tokensize is too large for the AMT chip, however Microsoft's tokensz.exe utility returns a value lower than the AMT 4KB limit, for the CONTOSO\admin account. Another possible cause is the trust chain for the Web Server certificate not being passed correctly because it is issued by subordinate CAs (as is the case for our web server template). The Intel recommended solution is to place the subordinate authorities in the SCCM server's Trusted Root Certificate Authorities store. I've done this but the issue still persists. Anyone have any experience with this? Thanks in advance. Regards, Adrian

Hello - Have you seen the below thread? http://social.technet.microsoft.com/Forums/en-US/configmgrgeneral/thread/ce714fee-7698-4bbb-b9d2-fda2b6b441b5 Anoop C Nair - This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.