search

Ylianst / MeshCommander

MeshCommander is a Intel(R) Active Management Technology (Intel(R) AMT) remote management tool. It's feature rich and includes a built-in remote desktop viewer for Hardware-KVM, a Serial-over-LAN terminal, IDER-Redirection support and much more. MeshCommander is built on web technologies and runs on many plaforms. In addition to being available as a stand-alone tool, MeshCommander was built to be very space efficient to that it can be uploaded into Intel AMT flash space to have it served diretly from the Intel AMT web serve.
Apache License 2.0
370 stars 80 forks source link

Some functional operation questions about MeshCommander. #7

Open tedlee0502 opened 4 years ago

tedlee0502 commented 4 years ago

  1. Why does the function of saving state take a lot of time to complete? The state jason file size is 1.2 MB takes about 3 minutes to save entire Intel AMT state. (System Status->Save State)

  2. Can't change Link policy settings at network settings.

  3. Unable to remove issue certificate by MeshCommander. (Create certificate by adding certificate it can be deleted)

  4. Can't use certificate by adding certificate. It can use issue certificate by MeshCommander.

Ylianst commented 4 years ago

let me see if I can answer these:

  1. Saving the entire state requires 100's on network round trips with HTTP POST calls to the Intel Management Engine (Intel ME) that is not a fast processor. If there is any tricks to reduce the number of round trips, I would be very interested in knowing.
  2. This may be a bug, I would have to look. This should be a separate issue and I would need to know what Intel AMT version you have.
  3. If a certificate is currently being used for TLS or some other use, it can't be removed unless you remove it's use first. I don't know the details of your situation, but this is my best guess.
  4. Sorry, I don't understand this question.

Hope it helps, Ylian

tedlee0502 commented 4 years ago

Hi Ylian:

Good day. Thank you for your reply.

  1. Intel AMT version is 11.8.50

  2. When I first create it by Issue Certificate, it can be deleted before it is used. But when I use it then cancel it, it cannot be deleted. CA1 CA2

  3. When I import a root CA in MeshCommander, it can be seen at drop down menu. CA

jsastriawan commented 4 years ago

For number 2, potentially there is TLS session using this certificate. For example if you are currently connected to this machine using TLS, although you disable TLS, TLS session is still running. Thus you cannot delete it. You could try to disconnect your Meshcommander session and use non TLS connection to delete the certificate.

tedlee0502 commented 4 years ago

Hi jsastriawan:

Thank you for your reply. I tested it according to the method you provided but it can't be deleted.

tedlee0502 commented 4 years ago

Good day. Can it be fixed at next version of MeshCommander ? (Q2, Q3, Q4) Can we know when the next version will be released ?

coddec commented 4 years ago

Seems this https://dannyda.com/2020/07/03/how-to-fix-meshcommander-unable-to-remove-certificate-error-400-intel-amt/ Works for Q3? Encountered same issue, Error 400, tried this method, works fine.

jacobopantoja commented 4 years ago

Hi @Ylianst, I cannot change the Link policy, and in one of my machines I think it is rendering the ME inaccessible after a few days (the machine is still accessible, though, but not the AMT interface). I'm using 0.8.8 in Linux