search

operepo / ope

Open Prison Education project - Code and scripts to enable offline docker services and offline laptop syncing for inmate education
MIT License
14 stars 6 forks source link

*Bug - Work Around* KMS server blocked when credentialed #147

Open jmichel-sbctc opened 11 months ago

jmichel-sbctc commented 11 months ago

It was reported to me that a student laptop couldn't connect to the KMS server for activation after having the laptop credentialed. Though some troubleshooting, we were able to get the laptop to connect and activate, but only after un-credentialing the laptop. It seems like the security on the laptop is preventing connections to the education KMS server on site.

When using the credential application to activate KMS, this occurs before the system is un-credentialed, preventing the connection.

Laptop Version: 1.0.118 SMC: Latest Release.

Reported by: Brandon

Work around

If you are using the credential application for activation and the laptop is credentialed, you will want to un-credential the laptop or remove the security policy on the laptop first.

Note: The first option (Using MGMT to unlock) was reported to not work.

With the MGMT command

1. Open an elevated command prompt. 2. enter mgmt unlock_machine. 3. run the credential application and enter the KMS information. 4. finish the credential process or return the the elevated command prompt and enter mgmt lock_machine.

Without MGMT

  1. Run the credential application and skip the KMS activation.
  2. When you get to the point where you select the SMC server, close the credential application.
  3. Run the credential application and enter your KMS information.
  4. Finish credentialing the laptop for the student.

    Edit 1: Marking and Striking out the method that didn't work. Edit 2: Added system information.

jmichel-sbctc commented 10 months ago

Update to the work around It has been reported that using MGMT to unlock the machine does NOT allow the KMS activation. If you are having issues getting KMS to work on the laptops, make sure to let the credential application unlock the machine.