Intel® Endpoint Management Assistant (Intel® EMA)

1 Intel Endpoint Management Assistant (Intel EMA) release Notes Intel EMA Version: Document update date: Tuesday, April 5, 2022 Legal DisclaimerCopyright 2018-2022 Intel Corporation. This software and the related documents are Intel copyrighted materials, and your use of them is governed by the express license under which they were provided to you ("License"). Unless the License provides otherwise, you may not use, modify, copy, publish, distribute, disclose or transmit this software or the related documents without Intel's prior written software and the related documents are provided as is, with no express or implied warranties, other than those that are expressly stated in the technologies may require enabled hardware, software or service product or component can be absolutely costs and results may license (express or implied, by estoppel or otherwise)

2 To any intellectual property rights is granted by this disclaims all express and implied warranties, including without limitation, the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, as well as any warranty arising from course of performance, course of dealing, or usage in products and services described may contain defects or errors known as errata which may cause deviations from published specifications. Current characterized errata are available on technologies features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No computer system can be absolutely secure. Intel does not assume any liability for lost or stolen data or systems or any damages resulting from such losses.

3 Check with your system manufacturer or retailer or learn more at , the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries. Other names and brands may be claimed as the property of Related Localized End User Intel EMA Cloud Start Tool Additional Intel AMT Information42 What s New in this release ? Upgrading from to or later63 Supported Operating Systems84 Installation Operating Web Intel AMT PKI Microsoft .NET Framework Network Ports115 Agent Prerequisites136 Known Issues and Limitations14 Intel EMAR eleaseNotes-Tuesday,April5,202211 IntroductionIntel Endpoint Management Assistant (Intel EMA) is a software application that provides an easy way to manage Intel vPro platform-based devices in the cloud, both inside and outside the firewall. Intel EMA is designed to make Intel AMT easy to configure and use so that IT can manage devices equipped with Intel vPro platform technology without disrupting workflow.

4 This in turn simplifies client Management and can help reduce Management costs for IT EMA and its Management console offer IT a sophisticated and flexible Management solution by providing the ability to remotely and securely connect Intel AMT devices over the cloud. Benefits include: lIntel EMA can configure and use Intel AMT on Intel vPro platforms for out-of-band, hardware-level Management lIntel EMA can manage systems using its software-based agent, while the OS is running, on non-Intel vPro platforms or on Intel vPro platforms where Intel AMT is not activated lIntel EMA can be installed on premises or in the cloud lYou can use Intel EMA s built-in user interface or call Intel EMA functionality from APIsThis document provides release -specific information for the current release of Intel : For the latest version of this document, please see ).

5 Related DocumentationThe following documentation is included as part of the Intel EMA software release package:Document (filename)DescriptionIntel EMA Quick Start Guide(Intel(R) ) Provides a simplified procedure for installing and configuring the Intel EMA server and deploying the Intel EMA agent for tutorial or proof-of-concept purposes in a small scale ( , laboratory) EMA Single/Distributed Server Installation and Maintenance Guide(Intel(R)_Single/Distributed_Server _Installation_and_ ) Provides complete installation, configuration, and maintenance instructions for implementing the Intel EMA server in a full scale production separate guide is provided for Single Server and Distributed Server EMA Administration and Usage Guide(Intel(R) ) Provides complete instructions for setting up and using Intel EMA to manage your Endpoint EMA Web Deployment Guide for AWS/Azure/GCP(Intel(R)_EMA_Web_Deploymen t_Guide_for_AWS/ )

6 Provides high-level conceptual information on how to deploy Intel EMA for a web-based services or cloud separate guide is provided for Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).Intel EMA API Guide Provides detailed usage information for the Intel EMA Applic-ation Programming Interface (API).Intel EMAR eleaseNotes-Tuesday,April5,20222(Intel(R ) ) Intel EMA JavaScript Libraries Guide(Intel(R) ) Provides detailed usage information for the JavaScript lib-raries included in Intel EMA. Localized End User DocumentationIntel EMA user documentation is available in multiple languages. Available languages are French, German, Mexican Spanish, Brazilian Portuguese, Russian, and Simplified Chinese. Translated user documentation is available at the following links. SpanishIntel EMAR eleaseNotes-Tuesday,April5,20223 EMAR eleaseNotes-Tuesday,April5,20224 Intel EMA Cloud Start Tool InformationThe Intel EMA Cloud Start Tool is a quick and simple way to create a cloud based, standalone Intel EMA instance for evaluation purposes.

7 There are two versions: a web based version, which works with Microsoft Azure; and a local execution version which works with Amazon, Google, and Microsoft Azure cloud services. See the links below for software downloads and based version: execution version: Additional Intel AMT InformationFor additional information about Intel AMT, please see the following documentation: EMAR eleaseNotes-Tuesday,April5,202252 What s New in this release ?Note: When upgrading an Intel EMA instance, the account under which the Platform Manager service runs reverts to Local System. If you are running that service under another local or domain account, it will need to be reconfigured and all Intel EMA components halted and restarted after the upgrade is complete. lThe version 4 (v4) APIs have been removed from this release of Intel EMA. The version 5 (v5) APIs will be removed in the next release of the Intel EMA API.

8 Please upgrade any custom integration code you have cre-ated to use a new API version. We recommend you always update to the latest API version as soon as pos-sible as older versions will be removed upon subsequent updates. If desired, you can use the "latest" API path (for example, GET /api/latest/802_1 XSetups) to ensure you are always calling the latest API version in your code. lImproved use of a Microsoft certificate generation process, where previously related temporary files were were left on disk. Over time, this could result in many unnecessary files left on disk. Although Intel EMA no longer leaves unnecessary files, it is unable to automatically clean up previous files as it is unware if other applications on the server are also using this these steps to manually clean up these files:Ensure that the server is dedicated to hosting only the Intel EMA application.

9 There are temporary files which are not created by Intel EMA specifically but as a part of the encryption process used by Intel EMA, the files are created as a by-product of the underlying Microsoft Crypto mechanism. These files can safely be deleted. They do not impact any Intel EMA functionalities and starting with Intel EMA only necessarily files will be left in these folders:Files are marked as System, need to update attributes in order to deleteattrib -s -r -h "C:\ProgramData\Microsoft\Crypto\RSA\S-1 -5-18\*.*"Delete all files silentlydel /q /f " C:\ProgramData\Microsoft\Crypto\RSA\S-1- 5-18\*.*" lIntel EMA version and later uses LDAPS secure ports by default (LDAPS secure port 636 and Global Catalog port 3269). Previous versions of Intel EMA used the standard non-secure LDAP ports (LDAP port 389 and Global Catalog port 3268).

10 If you are installing Intel EMA v or later, and are using Active Directory or integration, ensure the LDAPS ports are enabled. If you prefer to use the standard non-secure ports, then after installing Intel EMA, open the installer program again ( , run as administrator) and select File > Advanced Mode, then click Settings > Switch from LDAPs to LDAP to reset the LDAP ports Intel EMA uses to the standard non-secure ports. Alternatively, you can change the ports in the Web server settings on the Server Settings page in the Intel EMA UI. If you experience problems with setup during Intel AMT provisioning, this could be the issue. See the following link for more information: lSupport for the following will end when Intel EMA is released: lMicrosoft Windows 7 lMicrosoft Internet Explorer lIntel AMT EMAR eleaseNotes-Tuesday,April5,20226 lMicrosoft Windows Server 2012R2 lSQL Server 2012 lDue to new Microsoft requirements for the sAMAccountName of computer objects in Active Directory, (see KB5008102), computer objects created for support will now have a $ added to the end and their sAMAccountName will be computerName$IME$.