• Technician Content
  • Providing Support
  • Rescue vPro
  • Getting Started
product logo
Back button image Back
Back button image
product logo

How can I run OOB Management Features that Require User Consent?

Intel AMT may require user consent for selected management operations. like rebooting into the BIOS and hardware-based KVM, as part of its security design.

The user consent requirement depends on the Intel AMT device provisioning:
  • User consent is always required when a device is provisioned in Client-Control-Mode (CCM).
  • When a device is provisioned in Admin-Control-Mode (ACM), user consent can be enabled or disabled as part of the Intel AMT provisioning profile.
    Note: Unattended access to Intel vPro devices requires ACM provisioning. A unique certificate from an authorized Root Certificate Authority is needed for ACM provisioning.
  1. Select the Intel vPro device you want to access and click Connect.

    Result: A new Intel vPro session is launched.

  2. Select the General tab.
  3. Select an operation that requires user consent, such as Reset to BIOS or Power up to BIOS under Power Actions.

    Result: A dialog is displayed with a prompt message.

  4. Select Take action to confirm performing the respective power action explicitly.

    Result: Rescue will first check if there is already an ongoing request to start a new user consent session.

    • If there is no ongoing request, it will start a new user consent session request and show the following dialog:
    • If there is already an ongoing request, it will allow to continue with the ongoing request and show the following dialog:
      While an ongoing request exists to start a new user consent session, the managed device will display a hardware-rendered overlay with a 6-digit user consent code.

  5. Ask your customer to read back the code in an out-of-band communication channel (for example, mobile, chat, etc.).
  6. Enter the code in the Rescue TC or the Intel EMA web application.
    Note: If no valid code is provided within a specific time frame, the user consent session will eventually time-out, and the message overlay on the device will disappear. You can cancel an ongoing user consent session request at any time.

    Result: Once you enter the correct code, the message overlay on the device will disappear, and you can run the desired action.

What to do next: In the Intel AMT device provisioning process, you can configure how long a user consent session shall Intel EMAin active. You can run any management action requiring user consent during the set period without asking for consent again.
Related Articles:
  • How can I add a new Intel EMA Server Configuration?
  • How can I browse Intel EMA servers for available devices?
  • How can I stay logged in to Intel EMA within the Rescue Technician Console?
  • Using Windows Registry scripts to setup Intel EMA server configurations for the Rescue Technician Console
Article last updated: 24 October, 2023
You are viewing the latest version of this article.

Need more help?

Contact icon Contact support
Community icon Ask the Community
Training icon Attend trainings
Video icon Watch videos
  • Language selector icon Language selector icon
    • English
    • Français
    • Italiano
    • Deutsch
    • Español
    • Português
    • Nederlands
  • About Us
  • Terms of Service
  • Privacy Policy
  • Trademark
  • Do Not Sell or Share My Personal Info
  • Browse Products
  • Copyright © 2025 GoTo Group, Inc. All rights reserved

Collaboration Products

GoTo Connect

GoTo Meeting

GoTo Webinar

GoTo Training

join.me

Grasshopper

OpenVoice

Remote Solutions Products

GoTo Resolve

Rescue

GoToAssist

Access Products

Pro

Central

GoToMyPC