AMT SOL on Lenovo X250

[Martijn Verschoor]

Dear subscribers of the Genode mailinglist,

After some help by Christian Prochaska I managed to setup AMT SOL on Lenovo X250. I thought I’d share my experience because there are some pitfalls of which I was unaware.

On older systems like the Lenovo X201, you had to enable Legacy Redirection Mode for SOL to work. Unfortunately for the X250 this option is no longer available in the AMT <Ctrl-P> boot menu. Instead you can use wsman to set the ‘ListenerEnabled’ flag of the AMT_RedirectionService to true, and SOL will be available.

Please note that you cannot run wsman on the machine that you're trying to configure. wsman connects to the amt interface of the target machine and the amt interface is not accessible from the machine itself.

So, on another machine, make sure you have installed wsman:

$ sudo apt-get install wsmancli

Then inspect the ListenerEnabled flag with wsman:

$ wsman get http://intel.com/wbem/wscim/1/amt-schema/1/AMT_RedirectionService -h <TARGET_MACHINE_IP_ADDR> -P 16992 -u admin -p ‘<YOUR_AMT_PASSWORD>'

If set to false, set it to true using:

$ wsman put http://intel.com/wbem/wscim/1/amt-schema/1/AMT_RedirectionService -h <TARGET_MACHINE_IP_ADDR> -P 16992 -u admin -p ‘<YOUR_AMT_PASSWORD>' -k ListenerEnabled=true

For debugging you can increase the verbosity with the -d flag, e.g. -d 6.

Also note that the uri is not a url for a file on the Intel site ;-)

Thanks to Christian!

Met vriendelijke groet / kind regards,

Martijn Verschoor

Cyber Security Labs B.V. | Gooimeer 6-31 | 1411 DD Naarden | The Netherlands
[phone] (office) | [phone] (mobile)

[Adrian-Ken Rueegsegger]

Hello Martijn,

Post by Martijn Verschoor
Dear subscribers of the Genode mailinglist,
After some help by Christian Prochaska I managed to setup AMT SOL on Lenovo X250. I thought I’d share my experience because there are some pitfalls of which I was unaware.
On older systems like the Lenovo X201, you had to enable Legacy Redirection Mode for SOL to work. Unfortunately for the X250 this option is no longer available in the AMT <Ctrl-P> boot menu. Instead you can use wsman to set the ‘ListenerEnabled’ flag of the AMT_RedirectionService to true, and SOL will be available.
Please note that you cannot run wsman on the machine that you're trying to configure. wsman connects to the amt interface of the target machine and the amt interface is not accessible from the machine itself.

As an alternative one can also use the amtc tool [1]. It supports the
modification of a very limited number of settings of which SOL is one:

$ amtc -M sol=on -d <target machine>

Regards,
Adrian

[1] - https://github.com/schnoddelbotz/amtc/

[Martijn Verschoor]

Hi Adrian,

Post by Adrian-Ken Rueegsegger
As an alternative one can also use the amtc tool [1]. It supports the
$ amtc -M sol=on -d <target machine>

The projects looks interesting. I like that it is geared towards managing a larger pool of devices and that it comes with a web front-end, this may be useful someday.

Thanks!

Met vriendelijke groet / kind regards,

Martijn Verschoor

Cyber Security Labs B.V. | Gooimeer 6-31 | 1411 DD Naarden | The Netherlands
[phone] (office) | [phone] (mobile)

Post by Adrian-Ken Rueegsegger
Hello Martijn,

Post by Martijn Verschoor
Dear subscribers of the Genode mailinglist,
After some help by Christian Prochaska I managed to setup AMT SOL on Lenovo X250. I thought I’d share my experience because there are some pitfalls of which I was unaware.
On older systems like the Lenovo X201, you had to enable Legacy Redirection Mode for SOL to work. Unfortunately for the X250 this option is no longer available in the AMT <Ctrl-P> boot menu. Instead you can use wsman to set the ‘ListenerEnabled’ flag of the AMT_RedirectionService to true, and SOL will be available.
Please note that you cannot run wsman on the machine that you're trying to configure. wsman connects to the amt interface of the target machine and the amt interface is not accessible from the machine itself.

As an alternative one can also use the amtc tool [1]. It supports the
$ amtc -M sol=on -d <target machine>
Regards,
Adrian
[1] - https://github.com/schnoddelbotz/amtc/
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
genode-main mailing list
https://lists.sourceforge.net/lists/listinfo/genode-main