Skip to content

Build & Run RPC

The Remote Provisioning Client (RPC), when executed on an Intel® Active Management Technology (Intel® AMT) device, works in concert with the Remote Provisioning Server (RPS) to setup the Intel® AMT firmware. Once properly configured, the remote device can call home to the Management Presence Server (MPS) by establishing a Client Initiated Remote Access (CIRA) connection with the MPS.

After running the RPC, the Intel® AMT managed device can be managed remotely using the web interface!

Production Environment

In a production environment, RPC can be deployed with an in-band manageability agent to distribute it to the fleet of AMT devices. The in-band manageability agent can invoke RPC to run and activate the AMT devices.

RPC Figure 1: RPC Configuration

Figure 1 Details

The RPC on a managed device communicates with the MEI/Heci Driver and the Remote Provisioning Server (RPS) interfaces. The MEI/HECI Driver uses the MEI interface to talk to Intel® AMT. The RPC activates Intel® AMT with an AMT profile, which is associated with a CIRA configuration (Step 3). The profile, which also distinguishes between Client Control Mode (CCM) or Admin Control Mode (ACM), and configuration were created in Create a CIRA Config or Create an AMT Profile. After running RPC with a profile, Intel® AMT will establish a CIRA connection with the MPS (Step 4) allowing MPS to manage the remote device and issue AMT commands (Step 5).

Build RPC

We leverage GitHub Actions as a means to build RPC automatically leveraging Github's CI/CD Infrastructure. This avoids having to deal with the challenges of getting your build environment just right on your local machine and allows you to get up and running much faster. However, if you wish to do this locally, please follow the instructions here. Optionally, to build RPC with Docker, skip to Docker Build.

Read more about GitHub Actions here

Github Actions

To Build the RPC with Github Actions

  1. Create a fork of the repository.

    Fork rpc on github

  2. Click on the Actions tab at the top and select Build RPC (Native) Debug/Release.

  3. Click the Run Workflow dropdown.

  4. Select the branch: v1.2.0 from the Use workflow from dropdown.

  5. By default, the Build Type should be release.

  6. Click the Run Workflow button.

  7. The build time ranges from 15 to 20 minutes.

  8. Once the download is complete, click the completed job which will feature a green checkmark.

  9. Download the appropriate RPC for your managed device's OS under the Artifacts section.

To Delete your workflow run

  1. Click the ellipsis ( ... ) menu for the workflow.

  2. Choose the Delete workflow run option.

Docker Build (For Linux Hosts)

Keep in mind, the image created with this method is only suitable for Docker on a Linux host.

To build RPC with Docker, use the following command from the open-amt-cloud-toolkit/rpc directory:

docker build -f "Dockerfile" -t rpc:latest .

Note

If you wish to perform this docker build on Windows, ensure Use the WSL 2 based engine is enabled in Docker Desktop. Once the build is complete, you will need to get the built image to your Linux system running Docker.

Run RPC to Activate and Connect the AMT Device

To run the application and connect the managed device:

  1. On the managed device, open a Terminal (Linux) or Powershell/Command Prompt as Administrator (Windows).

  2. Navigate to the directory containing the RPC application.

  3. Run RPC with the following command to activate and configure Intel® AMT. It will take 1-2 minutes to finish provisioning the device.

  4. Replace [Development-IP-Address] with the development system's IP address, where the MPS and RPS servers are running.

  5. Replace [profile-name] with your created profile from the Web Server. The RPC application command line parameters are case sensitive.

    sudo ./rpc -u wss://[Development-IP-Address]/activate --nocertcheck -c "-t activate --profile [profile-name]"


    sudo docker run --device=/dev/mei0 rpc:latest --url wss://[Development-IP-Address]/activate --nocertcheck -c "activate --profile [profile-name]"
    Windows is not supported due to current limitations. See Devices in Containers on Windows for more information.

    rpc.exe -u wss://[Development-IP-Address]/activate --nocertcheck -c "-t activate --profile [profile-name]"

    Note

    Because we are using a self-signed certificate for easier development testing, we need to supply the nocertcheck flag. In production, you would opt for a CA signed certificate. Find out more information about the flag and other arguments.

Success

Example Output after Activating and Configuring a device into ACM:

RPC Success

Troubleshooting

Run into an issue? Try these troubleshooting steps.

Next up

Manage AMT Device