Skip to content

Common Commands

Jump to bottom
Andrew Mello edited this page May 27, 2026 · 1 revision

Common Commands

rpc operates against the local Intel ME via /dev/mei0 (use sudo) or against a remote AMT host over the network.

Query state

sudo rpc amtinfo

Key fields:

  • Version — AMT version (e.g. 16.1.27)
  • Features — AMT Pro Corporate (vPro Enterprise) or Intel Standard Manageability (ISM, limited)
  • Control Mode — pre-provisioning state, activated in client control mode, or activated in admin control mode
  • Operational State — enabled or disabled
  • AMT IP Address — 0.0.0.0 until AMT NIC requests DHCP

Activate (CCM, local)

sudo rpc activate -local -ccm -password "<strong-password>"

AMT password requirements: ≥8 chars, upper + lower + digit + special.

For the full guided flow with password generation, see amt-activate-linux.

Deactivate

sudo rpc deactivate -local

Returns AMT to pre-provisioning state. Wipes the MEBx password.

Activate (ACM, requires provisioning cert)

sudo rpc activate -local -acm \
    -password "<strong-password>" \
    -url https://your-mps.example.com/activate \
    -profile <profile-id>

For full headless mode (no KVM consent prompt). Requires PKI infrastructure — see CCM vs ACM in amt-activate-linux wiki.

Remote operations

rpc amtinfo -u admin -p "<password>" -h 192.168.1.106

Add -tls for TLS (port 16993) if AMT 16.1+.

Configure features after activation

# Set TLS
sudo rpc configure -tls -password "$PW"

# Set WiFi
sudo rpc configure -wifi -password "$PW" -ssid "..." -wifipassword "..."

# Set 802.1x
sudo rpc configure -8021x -password "$PW" -cert <cert> -key <key>

See rpc --help for the full list.

Get help

rpc --help
rpc activate --help
rpc configure --help

See also

Clone this wiki locally