Cyprus championship still up for grabs after weekend stalemate

Posted On May 26 2020 by

first_imgBy Iacovos ConstantinouThe weekend games at the top of the table made us no wiser as to who will finally clinch the Cyprus championship as all three games ended in score draws leaving the league standings unchanged. In the relegation group, things are clearer as Othellos Athienou will now need a miracle to avoid the drop as they trail the team directly above them by five points.In a riveting game at the Antonis Papadopoulos stadium, APOEL had to come back from behind three times to salvage a point against a spirited Anorthosis who are still harbouring hopes of a top-three finish.Former APOEL striker Concalves gave the home team the lead twice with Charalambides and Efraim answering for the visitors. Makris restored the lead for the Famagusta team early in the second half before a late Jason Demetriou own goal restored parity.The visitors, who hit the post three times, could have clinched it deep into injury time but their top scorer Djebbour blasted over with the goal gaping.It would have been rough justice for Anorthosis who were furious when referee Mashias failed to give APOEL’s Lanig his marching orders for a lunging tackle on Makris midway in the first half, having received his first yellow a few minutes earlier, with the score delicately poised at 1-1.In a poor game with few chances, Omonia and AEK played out a 1-1 draw. A point separates the two teams who next week face the top two teams APOEL and Apollon respectively.The visitors took the lead through Kante before Loibianidze equalised with seven mnutes to go. Ermis Aradippou proved punters wrong as they forced Apollon to a deserved draw in Limassol.Ermis took the lead twice through Onilo and Manu with Lopez and Merkis equalising for the home side.Both sides missed chances to win the game. In the bottom group, Othellos Athienou needed the points to keep their survival hopes alive and even took the lead against Ethnikos Achnas through Sassy.However Ethnikos quickly took charge of the game and after hitting the post twice and missing a penalty, Pinceli finally equalised before the break.Hadjivassilis got the winner for the visitors, leaving Othellos stuck in last place five points adrift of Ayia Napa.Ayia Napa got hammered 3-0 by Nea Salamina who have now guaranteed their place in the top flight.The goals came from Leon and a Panayiotov own goal in the first half while Morris wrapped up the scoring four minutes from time.Doxa hit four past a second string AEL side that has managed just one win in the playoff stages.Lombo opened the score for the visitors in the seventh minute with the same player doubling the score before the break.Ramos made it three after the break before Lobo completed his hatrick a minute from time.last_img read more


Suspect in East Canje shooting gives conflicting statements

Posted On Jan 13 2020 by

first_imgAs police continue to probe the fatal shooting of an East Canje farmer three days ago, the two suspects remain in custody; however, one has given investigators conflicting statements.Dead: Ramnarine EtwaruThe body of Ramnarine Etwaru was found on a dam in East Canje with multiple gunshot wounds on Tuesday last. Following the discovery, police arrested two men, Ramadolar Shamdundar called ‘Arnold’, 38, and Diaram also called ‘Bouy’, 46.One of those in custody is a fisherman who saw Itwaru lying on the dam and reportedly told villagers that the man had met with an accident. It was after villagers arrived on the scene that it was discovered that he was shot execution-style.Initially, one of the suspects told investigators that he heard gunshots and saw when the fisherman was coming out of the backdam. That story was changed with the suspect now saying that he did not see the fisherman. He has also given investigators conflicting timeframes about when he left the backdam.Nevertheless, the probe into the latest murder in the Region continues with detectives working on a theory that Itwaru was shot over a disputed plot of land situated at Gangaram.The fact that Etwaru’s motorbike was found in an upright position next to where the body was lying leaves some to believe that he might have been lured off of the bike before being shot.Etwaru leaves to mourn his wife and an eleven-year-old son. Police are continuing their investigation and are hoping to get a confession from the suspects soon.last_img read more


Klopp: Luck was not with us

Posted On Jan 11 2020 by

first_img0Shares0000Liverpool manager Jurgen Klopp PHOTO/AFP.BASEL, Switzerland May 19- Liverpool boss Jurgen Klopp has bemoaned his side’s lack of luck after their loss in the Europa League final, with the German of the opinion that key refereeing decisions went in favour of victors Sevilla.The Spanish outfit secured their third consecutive Europa League triumph on Wednesday, coming from a goal down to beat the Reds 3-1 in Basel. Daniel Sturridge put the Merseyside outfit ahead with a fantastic first-half effort, but they were pegged back just 18 seconds into the second period when Kevin Gameiro found the back of the net. Coke then grabbed a brace to claim victory for Sevilla.The Reds felt they had three cases for penalties in the first half, all for handball, while referee Jonas Eriksson waved away his assistant’s offside flag for Coke’s second goal which proved the final nail in Liverpool’s coffin.While Klopp did not name Eriksson directly, the German lamented the fact that his side did not have the rub of the green in the final.“Today there were four decisive, obvious decisions and all were against us. In a final when it’s close you need a little luck and we didn’t have it. If it was 2-0 at half-time it’s different,” he said.Klopp admitted that his side did not respond well to Gameiro’s goal, losing their way somewhat following the equaliser, a lapse they cannot afford to repeat.“The first half was okay. Sevilla were playing a lot of long ball to avoid our pressing game. Obviously, the first goal had a big impact on our team. We lost faith in our style of play. We lost our formation. It wasn’t compact anymore. I’ve had this problem one or two times,” he explained.The former Borussia Dortmund boss added: “It wasn’t just the team that was shocked (by the equaliser) but the crowd was shocked too. We had a wonderful atmosphere until it went 1-1 and then Sevilla took the game.“We had 44 minutes to strike back so what’s the problem? We have to react better.“Use the time and use the experience, that’s what we’ve got to do. It’s a long tournament for my players and a short break. We’ll use the break and hopefully they’ll come back fit.“Of course, the team will be a little bit different next year. We’ll do something with transfers that’s clear. I’m sure we’ll again be in a final and again have decisive moments and we’ll have to do better.“We have to work on it, it’s not a wonder or something, it’s pure work.”The result means that Liverpool will not take part in European competition next season, a blow to the English giant. However, Klopp believes that the lack of midweek football could assist his team next season.“Now we are frustrated but tomorrow or in a week we will see it more clearly and we will use it,” he said. “We are out of international competitions [next season], there’s not a lot of football on Wednesdays and Thursdays and that means a lot of time to train. We will come back stronger for sure.”0Shares0000(Visited 1 times, 1 visits today)last_img read more


BBQ Ice Cream? You bet!

Posted On Dec 26 2019 by

first_img AD Quality Auto 360p 720p 1080p Top articles1/5READ MOREFrumpy Middle-aged Mom: My realistic 2020 New Year’s resolutions. Some involve doughnuts.160Want local news?Sign up for the Localist and stay informed Something went wrong. Please try again.subscribeCongratulations! You’re all set! Hey there, you with the barbecue. Are you suffering from the grilling blues? It happens to the best of us. Memorial Day arrives, you can’t wait to grill hot dogs and hamburgers, chicken and ribs. By Independence Day, you’re staving off boredom by grilling steaks, shrimp, swordfish, onions, zucchini and pineapple. By mid-July, you’ve hit the wall. And now with Labor Day right around the corner, it’s still too hot to cook indoors, and you’ve exhausted all your favorite menus. No mere marinade can save you from the barbecue doldrums. Do not despair. With a dollop of daring, this can become the most exciting and delicious part of the outdoor season. You can grill pizzas or oysters, tofu or watermelon even ice cream. Best of all, you can cook each of these dishes within minutes, without working up a sweat or neglecting your guests. RICK’S BARBECUED ICE CREAM (aka Grilled Alaska’) 1 large pound cake, frozen 3 square ice cream bars (no sticks), hard 12 to 16 egg whites 1 teaspoon cream of tartar 1 cup granulated sugar Raspberry and apricot jams Chocolate sprinkles 1 wooden plank, 12-by-12-by-1-inch thick, soaked in hot water Heavy-duty aluminum foil to wrap plank 8-ounce jar chocolate fudge sauce or caramel sauce or other topping of your choice Electric knife (for best results) Fresh mint leaves for garnish Get a good hot fire (500 F plus) going in a kettle grill or smoker. If you use charcoal in a kettle grill mound it in two piles on either side of the cooker, leaving the middle of the grill open. If using a gas grill, turn on all burners to high. Whip the egg whites, cream of tartar, and sugar into a stiff meringue so that when you pull beaters away sharp points stand up in the meringue. At the last minute, add a generous amount of chocolate sprinkles and quickly fold into the egg whites. Put in refrigerator. Working quickly, wrap the wet plank in the foil. Cut frozen pound cake in half horizontally, and lay one half on the foil. Spread raspberry jam on top of the pound cake half. Place the ice cream bars on the jam-covered pound cake so they exactly cover the surface. Place the other piece of pound cake on top of the ice cream, and cover with apricot jam. Completely cover the cake on all sides with meringue, being sure to bring the meringue all the way down to touch the foil all around cake. (If you leave any gaps the ice cream may melt and spoil the dessert.) Place the plank on the center of the grill in the cooker. Check after 2 minutes and as soon as you see the peaks of meringue brown remove the dessert from the cooker. his will take only a few minutes with a very hot fire. Slide the cake off the plank and onto a chilled serving platter. Cut vertical slices through meringue, cake and ice cream with an electric knife (much preferred way) or, if you don’t have one, use a very sharp serrated knife that you dip into hot water between slices. Slide slices onto plates onto which you have spooned a generous pool of chocolate or caramel sauce, or both. Garnish sauce with fresh mint leaves, shake more sprinkles over meringue and serve.Makes 4 to 6 servings. Adapted from Rick Browne’s www.barbecueamerica.comlast_img read more


Liverpool defender Joe Gomez stretchered off after freak collision

Posted On Dec 25 2019 by

first_img 2 2 Which teams do the best on Boxing Day in the Premier League era? Klopp will hope the injury is not significant with a hectic period of fixtures over the next month.Gomez underwent ankle surgery in May, which ruled him out of the World Cup in Russia. getty no dice Top nine Premier League free transfers of the decade Gomez has been crucial to Liverpool’s form this season Oxlade-Chamberlain suffers another setback as Klopp confirms serious injury MONEY Gomez, who slid into the boards following a tackle from Ben Mee, received treatment on the pitch but could not continue.The England international started the game at right-back in favour of Alexander-Arnold as Jurgen Klopp made seven changes. ADVICE Where Ancelotti ranks with every Premier League boss for trophies won RANKED Latest Football News Gomez crashed into the advertising hoardings BEST OF REVEALED Every time Ally McCoist lost it on air in 2019, including funny XI reactions REVEALED Son ban confirmed as Tottenham fail with appeal to overturn red card Ronaldo warned Lukaku how hard scoring goals in Serie A would be before Inter move Joe Gomez was stretchered off during Liverpool’s match against Burnley after a freak collision with the advertising hoardings at Turf Moor.The defender appeared to injure his ankle and was subsequently replaced by Trent Alexander-Arnold just 23 minutes into the Premier League clash. Forbes list reveals how much Mayweather, Ronaldo and Messi earned this decade huge blow last_img read more


Crawford wins LYIT 5k – where did you finish? Full results here

Posted On Dec 22 2019 by

first_imgLetterkenny 24/7’s Gavin Crawford was the winner of tonight’s LYIT 5k.Crawford came home in 16 minutes and 53.1 seconds, with Milford AC’s Johnny O’Doherty second in 18:27.8 and Letterkenny AC’s Pól Mac Giolla Bhride third in 18:36.7.Letterkenny AC’s Monica McGranaghan was the first female home, finishing in 19:14.5 LYIT 5k 2017PlaceBibNameGenderAGClubTime1.428Gavin CrawfordmMO24/7 Tri Club16:53,12.418Johnny OdohertymMOMilford AC18:27,83.407Pol Mac Giolla BhridemMOLetterkenny AC18:36,74.411Daniel HewittmMOMilford AC19:09,65.379Monica Mc GranaghanfF40Letterkenny AC19:14,56.392Maria Ní MhaolagáinfFOLetterkenny AC19:21,17.419Sean McFaddenmMOLetterkenny AC19:23,18.393Shane Mc GuiremMO19:35,19.380John HughesmM50Letterkenny AC19:42,510.410Paul Mc KelveymMORosses AC19:46,711.436Martin JordanmMOConvoy AC20:06,112.383Adrian CallaghanmM40Letterkenny AC20:11,613.382Dan FrielmMO20:28,214.405Darren HarkinmJM21:00,315.376Darren TolandmMOCrieve Road Running Club21:09,816.394Darragh DohertymMO21:11,117.404Adrian MarshmM4021:25,918.397Frank Mc TaggartmM40Milford AC22:02,719.381Cormac O KanemM4022:08,020.396Joe Mc LaughlinmM4022:08,521.389Richard RaymondmM60Letterkenny AC22:15,022.413Tommy DuddymMO22:47,423.414Joe GibbonsmMO22:47,724.378Marian KerrfF40Letterkenny AC23:03,325.427James SmithmMO23:29,926.437Michael JordanmM40Convoy AC23:36,627.399Sarah DohertyfFOConvoy AC23:39,628.476Holly DuddyMO23:43,029.409Kevin LynchmM5023:43,630.429Demelza CallaghanF3524:00,331.421Chris CallaghanmMO24:27,932.373Barry TinneymM4024:29,133.403Pat ByrnemM50Killybegs Swanlings24:37,534.388Andy Mc GovernmM4024:40,535.375Ciarán Mc BreartymMO24:59,136.377Joseph CaseymM5024:59,837.385Bambi DohertyfFOLetterkenny AC25:04,138.384Pat Mc KennafF40Letterkenny AC25:05,939.406Declan CallaghanmMO25:25,240.401Billy BroderickmM50Killybegs Swanlings25:55,141.425Jean McGlincheyfFO26:26,242.395Eamon O BoylemM5026:50,143.420Linda CroninfFOLetterkenny AC27:05,344.415Shaun OdonnellmMOSwanlings27:11,245.390Noel HeekinmMOSliabh27:13,646.416Damien BuchananmMO27:22,147.402Amanda ByrnefFO27:43,148.400Mary O SheafFO27:43,749.424Noreen SharkeyfF6027:46,150.434Paddy FloodmMO28:05,351.435Maeve CollfFOL Y I T28:23,052.398Sinéad Mc TaggartfF40Milford AC28:34,253.422Caolan MelarkeymJM28:38,154.417John CoylemMO28:43,155.432Maureen O NeillfFO29:22,856.426Orla CallaghanfF4029:22,957.391Amanda TolandfFO30:36,258.423Paul McClaffertymM5030:37,759.430Louise CallaghanfFO30:51,560.387Marie Mc GoniglefF4030:52,761.386Marian GallagherfF4030:54,062.412Gerard SharkeymFOSwanlings31:35,063.438Sarah van StaverenfFO35:08,664.800Jimmy GildeamM50Letterkenny AC41:00,765.431Josie GallagherfMO41:00,7Crawford wins LYIT 5k – where did you finish? Full results here was last modified: March 7th, 2017 by Chris McNultyShare this:Click to share on Facebook (Opens in new window)Click to share on Twitter (Opens in new window)Click to share on LinkedIn (Opens in new window)Click to share on Reddit (Opens in new window)Click to share on Pocket (Opens in new window)Click to share on Telegram (Opens in new window)Click to share on WhatsApp (Opens in new window)Click to share on Skype (Opens in new window)Click to print (Opens in new window)last_img read more


Qatar backs rebranded Air Italy to take on ailing Alitalia.

Posted On Dec 18 2019 by

first_imgThe new Air Italy livery. Photo: Qatar. Rebranded Italian airline Meridiana hopes to operate a fleet of 50 aircraft and carry 10 million passengers by 2022 after relaunching as Air Italy with the backing of Gulf carrier Qatar.The move is a direct challenge to troubled Italian flag carrier Alitalia as it continues to struggle through bankruptcy proceedings.Alitalia entered special administration last year after Qatar rival and 49 percent shareholder Etihad withdrew its support and the Italian government has indicated there will be no resolution before elections on March 4.Qatar has taken a 49 percent stake in the new parent company of Air Italy with the previous sole shareholder, Alisarda, holding the other 51 percent.Read: Qatar takes stake in Cathay Pacific.The rebranded airline, which unveiled its new livery this week, will receive 20 Boeing 737 MAX aircraft over the next three years, starting April. It will also receive five Airbus A330-200 aircraft this year from Qatar ahead of these being replaced by Boeing 787-8 aircraft next year.Air Italy is also extending its reach with new routes from Milan to New York and Miami already announced.It said that would be followed new short-haul routes connecting Milan to Rome, Naples, Palermo, Catania and Lamezia Terme.Further, plans included strengthening the short-range network to improve connectivity and launching the first long-range destination from Rome Fiumicino in 2019 with an aim of flying 50 year-round routes by 2022.Qatar chief executive Akbar Al Baker said the partners aimed to build a sustainable airline alternative for the people of Italy and global travelers visiting the country.“With high quality and an affordable schedule of services in the domestic, regional and intercontinental segments, Air Italy will achieve global scale in both fleet and network expansion, offering high-quality premium class products across all flights on a modern fleet,’’ he said in a statement.Meridiana chairman Francesco Violante said the airline expected about 8 million of the 10 million passengers it planned to carry by 2022 would use Milan Malpensa airport.“In support of this ambition, there is a great need to develop new skills and competencies amongst our people and for all to embrace change as a fantastic opportunity,’’ he said. “I wholeheartedly support this new effort.”Meridiana says it has carried more than 100 million passengers to date as a full-service carrier, operating both short-haul and long-haul flights.It has more than 1,400 dedicated employees, maintains codeshare partnerships with other major airlines, and is a full member of IATA. It is the biggest airline at Olbia Costa Smeralda airport.last_img read more


Flickr Hack Makes 3D Model of Any City in a Day

Posted On Dec 16 2019 by

first_imgOther sources: Futurity Tags:#Photo Sharing Services#web 8 Best WordPress Hosting Solutions on the Market Top Reasons to Go With Managed WordPress Hosting A Web Developer’s New Best Friend is the AI Wai… Scholars at the University of North Carolina at Chapel Hill have developed a method for creating 3D models of pretty much anything in pretty much no time. Using a sexy algorithm and the millions of photographs available from Flickr, the team can create a sophisticated three-dimensional model on a single personal computer in under a day. The process was created by a team made of specialists from UNC and colleagues at Swiss university, ETH-Zurich, led by Jan-Michael Frahm. Their proof-of-concept was Rome, which was constructed out of 3 million images in under a day using over-the-counter graphics software, according to UNC. “Our technique would be the equivalent of processing a stack of photos as high as the 828-meter Dubai Towers, using a single PC, versus the next best technique, which is the equivalent of processing a stack of photos 42 meters tall – as high as the ceiling of Notre Dame – using 62 PCs. This efficiency is essential if one is to fully utilize the billions of user-provided images continuously being uploaded to the Internet.”They follow-up Rome with the same process on Berlin.The implications are interesting. Such a process could be, Frahm said, folded into consumer tools like Google Earth and Bing Maps. It could also help both disaster responders, who need a full picture of where they’re headed, and tourists, who want to find out all they can about a location with a click. curt hopkins Related Posts Why Tech Companies Need Simpler Terms of Servic…last_img read more


To Bot or To Tweet, That Is The Question

Posted On Dec 16 2019 by

first_imgWhy Tech Companies Need Simpler Terms of Servic… A Web Developer’s New Best Friend is the AI Wai… dan rowinski 8 Best WordPress Hosting Solutions on the Market Tags:#biz#How To “I’m not sure there’s ever going to be a day when your newsroom budget has a ‘revenue’ line for social media that balances out the ‘expenses’ line,” said Jeff Sonderman, digital media fellow at the Poynter Institute who specializes in mobile and social media. “But the question a smart manager has to ask is, can I afford not to do this? Can I really afford not to engage with my readers? Am I willing to let the news conversation happen without my newsroom involved in it?”Sonderman focuses on the news industry but the question of engaging with customers cuts across all businesses.A Bot For Your NicheThere are benefits to bots. People come to social platforms, especially Twitter and Tumblr, as a way to stay up to date with things they are interested in. The online world is fragmented and people gravitate toward their particular niche. In that regard, having a bot that fulfills their craving for a particular kind of news can be beneficial.“Something that is pre-defined as only fitting a certain niche can maybe be automated, because you’ve at least made a valuable decision to focus it,” Sonderman said. “Auto-tweeting a bunch of unrelated stuff on one account is more of a problem.”Curated Feeds For AppsWhen it comes to mobile applications that use social media to draw in content, there are arguments for both sides. Some of the best feeds on Flipboard are from individual users that curate content through retweets, share pictures through TwitPic (or like service), express personal opinions and create original content. For instance, set up a Flipboard feed for someone like tech blogger Robert Scoble. The result is a mix of articles and tweets that reads like a magazine, up to date with everything he has been working on and the conversation he is having.A bot will create the same type of magazine on Flipboard with all of your content and news, but without the extra layer of pictures and conversational context that turn it from a glorified RSS reader into a dynamic content experience. The New York Times is breaking up with the bot that automatically tweets every article that goes up on the newspaper’s website. Instead, New York Times content will be curated by a team of social media editors who are much more interactive and collaborative online, @replying users and retweeting interesting non-New York Times content.An interesting question emerges on how people, companies and publishers should be using the social space to build their brands, especially those focused on content. A Twitter bot is simple and it gets all the links to your content into the open, more or less like a 140-character RSS reader. Mobile applications like Flipboard and Zite use those Twitter streams to populate their feeds so there is incentive to just let a bot get all of the content out in one place. Is there a perfect mix between bot and human that works best in social media?This is not just a discussion about Twitter but about resources that a company puts in to social media and the return it can expect. Social media done right, the way all the pundits say it should be done – interaction, attentive and responsive – takes time and work. It is easy to set up a content management system to send a headline and a short URL to Tumblr, Facebook and Twitter. Top Reasons to Go With Managed WordPress Hosting Related Posts last_img read more


Intel AMT 3.2.1 Self-signed certificate issue and working around it for Microsoft System Configuration Manager SP1

Posted On Dec 9 2019 by

first_imgAfter running SelfSignedFix.vbs, you should be able to do a rediscovery of the Management Controller within SCCM and see that the AMT Status is now reflected as “Not Provision”. With the vPro Client in a “Not Provision” state, SCCM will be able to natively provision the client without issues. With the archive file decompressed, you will see two VBScripts in the folder: SelfSignedFix.vbs and ExecFromCollection.vbs. SelfSignedFix.vbs is the VBScript that will perform the remote Provision / Un-provision. To use the SelfSignedFix.vbs, there are several parameters you must supply for it to work properly: **Begin Execution 8/11/2008 8:22:12 PM*************************Connecting to https://sccmsp1.vprodemo.com/wstrans/setup/eoi20/192.168.0.100/wsmanUnable to connect to AMT Device: 192.168.0.100**End Execution 8/11/2008 8:22:12 PM*************************This error can occur for a variety of reasons. Some common causes of this error are: ExecFromCollection.vbs will cycle through each enumerate member in the collection and execute SelfSignedFix.vbs VBScript against it. Prior to running ExecFromCollection.vbs, you need to ensure that the SelfSignedFix.vbs VBscript and ExecFromCollection.vbs VBscript are located in the same folder. Screen Output: Whether (Y) or not (N) to display the Provisioning / Un-provisioning output on the console screen. The script will connect to the Intel WS-MAN Translator listening on https://sccmsp1.vprodemo.com/ to perform the Provision / Un-provision on vpro-client.vprodemo.com. c:\temp\vpro-client.vprodemo.com.log will be generated with the results of the provision / un-provision and those results will not be displayed on console.!http://communities.intel.com/openport/servlet/JiveServlet/downloadImage/38-11443-1769/4.JPG! Remote Provision / Un-provisionTo perform a Provision / Un-provision remotely on the vPro Client, the community has created a visual basic script that will perform the function remotely. In an attempt to reduce the complexity, the VBScript leverages the Intel WS-MAN Translator to provide the authentication and remote configuration connection. To leverage this remote Provision/Un-provision capability, you must have the Intel WS-MAN Translator installed and configured prior to executing the VBScript. Please visit the following Blog to learn how to install and configure the Intel WS-MAN Translator.The VBScript and guide can be download from the following location (http://communities.intel.com/docs/DOC-1850) and contents can be decompressed to a folder on either your SCCM server or on workstation that you want to run the script from. Please note that you must have WINRM basic authentication switched to “true” on the computer you are planning to run the VBscript from; WINRM Basic Authentication is required for connections to the Intel WS-MAN Translator to work properly. To turn WINRM Basic Authentication to true, run the following command from the command line:winrm set winrm/config/client/auth @{Basic=”true”} Within the MEBx Menu, select “Change Intel(R) ME Password”. **Begin Execution 8/11/2008 8:22:22 PM*************************Connecting to https://sccmsp1.vprodemo.com/wstrans/setup/eoi20/192.168.0.101/wsmanSetting AMT ClockSetting HostNameSetting TLS settingsSetting new MEBx PasswordCommitChangesCommitChanges_OUTPUTReturnValue = 2057 When returned to the Intel(R) AMT Configuration Menu, select “Unprovision” After performing the local Provision / Un-provision, you should be able to do a rediscovery of the Management Controller within SCCM and see that the AMT Status is now reflected as “Not Provision”. With the vPro Client in a “Not Provision” state, SCCM will be able to natively provision the client without issues. Although fairly simplistic, one of key disadvantages of locally provisioning and un-provisioning the vPro Client is that you will need to have physical (touch) access. When you edit your task sequence, add a new “General”-> “Run Command Line” task. Automating the execution of SelfSignedFix.vbs within SCCMTo avoid having to run SelfSignedFix.vbs on each impacted system individually, there are a couple of automated procedures you can perform depending on what is right for your environment. To identify and isolate the vPro Clients that are impacted by the invalided Self-signed Certificate, you can create a SCCM Collection using the following criteria “Select * from sms_r_system where AMTStatus=1”; this will automatically bucket all the vPro Clients listed as AMTStatus Detected in a single collection for easy identification. vPro Client is not accessible on the network BackgroundvPro Clients that are experiencing the issue will show up as AMT Status “Detected” within the Collection View after a Management Controller discovery and will exhibit with the following error in the amtopmgr.log: Intel WS-MAN Translator URL: This is the secure URL on which the Intel WS-MAN Translator is listening When presented, ensure you select “Full Unprovision” and press enter Create a New Task Sequence and give it a name that is easily recognizable. Make sure you create the Task Sequence with the option of “Create a new custom task sequence”. When returned to the MEBx Menu, select “Exit” During SCCM Management Controller DiscoveryError 0x80090308 returned by InitializeSecurityContext during follow up TLS handshaking with server.Error 0x6fcb970 returned by ApplyControlToken*During a SCCM Provisioning attempt*Error 0x80090308 returned by InitializeSecurityContext during follow up TLS handshaking with server.Error 0x261b948 returned by ApplyControlToken When presented with “Are you sure you want to exit: (Y/N)”, enter “Y” If you have not changed the default admin password already, login in with “admin” as the password. If you have already changed the MEBx password, log in with the password you changed it to The script will connect to the Intel WS-MAN Translator listening on https://sccmsp1.vprodemo.com/ to perform the Provision / Un-provision on client located at IP address 192.168.0.101. 192.168.0.101.log file will be generated in the current working directory that the script was ran from with the results of the provision / un-provision and those results will be displayed on console.!http://communities.intel.com/openport/servlet/JiveServlet/downloadImage/38-11443-1771/6.JPG! The Hostname, FQDN, or IP Address of the vPro Client: This is the vPro Client that is having the issue with the Self-signed Certificate and needs to be Provisioned / Un-provisioned Local Provision / Un-provisionTo performing a Provision / Un-provision locally on the vPro Client Once the constants have been modified within ExecFromCollection.vbs, you can execute the VBscript by running the following Command Line: Log File Location: This is the folder or share where the results of the provision / un-provision will be logged for the client. Note that SelfSignedFix.vbs script will automatically create a new log with the filename of the hostname, FQDN, or IP Address you used as the previous parameter. When presented with “Intel (R) New ME Password”, Enter in the same password you configured in SCCM Component Configuration -> Out Of Band Management -> General Tab -> MEBx Account. The script will connect to the Intel WS-MAN Translator listening on https://sccmsp1.vprodemo.com/ to perform the Provision / Un-provision on vpro-client.sccmsp1\certfix$\error logs\vpro-client.log will be generated with the results of the provision / un-provision and those results will be displayed on console.!http://communities.intel.com/openport/servlet/JiveServlet/downloadImage/38-11443-1770/5.JPG! As a general reference, you can only change the MEBx password remotely once and only if the vPro Client is in a factory default state (never been provisioned). Since this VBScript remotely provisions and un-provisions the vPro client, we must set the MEBx password during this provisioning process. To Change the MEBx password, open SelfSignedFix.vbs with any text editor and modify (line 19) with your environment specific information:Const SCCMMEBxPassword = “P@ssw0rd” to Const SCCMMEBxPassword = “<your SCCM MEBx password>” Allow vPro Client to reboot fully In preparation of creating a task sequence, create a remote share on a server where the SelfSignedFix.vbs will be run from and the log files generated from SelfSignedFix.vbs will be stored. Ensure sufficient permissions are granted to the account running the advertisement. For step by step instructions on how to create the collection for vPro Clients with the AMT Status of Detected, please reference the guide included with the scripts.Once you have the impacted vPro Clients in a single collection, you can either use SCCM Advertisements to push and execute SelfSignedFix.vbs from the client or you can use the included ExecFromCollection.vbs to connect directly to collection and execute SelfSignedFix.vbs on an enumerated list of members in that collection.Critical Note: Before proceeding to use one of these large execution methods, it is recommended that you test your configuration (both SelfSignedFix.vbs and Intel WS-MAN Translator) by testing on a few impacted system individually first. Once you run SelfSignedFix.vbs steps above on these select impacted vPro Clients, you need to ensure you are able to natively provision the client within SCCM before you move onto a more automated implementation. cscript SelfSignedFix.vbsvpro-client “sccmsp1\certfix$\error logs” Ycenter_img vPro Client is already provision SMSSITECODE : This is your SMS Site Code Note:  The Self Signed Certificate issue was corrected with AMT firmware 3.2.2.  Please work with your OEM to secure the 3.2.2 firmware update.  — Matt RoyerSummaryAn issue has been identified that may cause the remote configuration provisioning process to fail when using Microsoft System Center Configuration Manager (SCCM) on systems that have been upgraded from Intel AMT 3.x firmware to 3.2.1 firmware. The Self-signed certificate used to establish the initial PKI provisioning (Remote Configuration) connection is being read as invalid, which causes this failure.The recommended resolution is to perform a provision and un-provision of the system to regenerate the Self-signed certificate. This resolves the certificate being read as invalid and prepares the PC to be provisioned successfully by SCCM. This can be accomplished locally at the PC or remotely from the console. Both scenarios are documented in detail below but local provision/un-provision will require entering the Management Engine BIOS Extension (MEBx) screen at the local machine. To perform this action remotely, the community has developed a software-based script to execute a remote provision/un-provision. The script should be run for vPro clients experiencing this issue prior to SCCM provision. Once the script is executed, the vPro clients can then be natively provisioned by SCCM. When returned to the Intel(R) AMT Configuration Menu, select “Return to Previous Menu” cscript SelfSignedFix.vbs192.168.0.101 “” Y After running SelfSignedFix.vbs VBscript via the advertisement, you should be able to do a rediscovery of the Management Controller within SCCM and see that the AMT Status is now reflected as “Not Provision”. With the vPro Client in a “Not Provision” state, SCCM will be able to natively provision the client without issues. For any vPro Clients that remain in a Detected state, review the log file and isolate the root of their issue.Note: Depending on your Client OS configuration, it may be necessary to set WINRM basic authentication to “true” prior to execution SelfSignedFix.vbs; this can be accomplished by add winrm set winrm/config/client/auth @{Basic=”true”} command line task prior to the execution of SelfSignedFix.vbs.This blog was intended to give you a general understanding of the issue and the work arounds that are in place. For a comprehensive step-by-step guide, please refer to the documentation included with Remote Provision / Un-provision Script archive file. To download the Scripts and the Guide, please visit the following URL: http://communities.intel.com/docs/DOC-1850–Matt Royer Using ExecFromCollection.vbsExecFromCollection.vbs is a VBscript that will connect to a desired collection, enumerate the list of members in the collection, and execute SelfSignedFix.vbs VBScript against each member in the collection. Prior to using ExecFromCollection.vbs, you must first change the SMSSiteCode, SMSServer, SMSCOLLECTION, and WSTransURL constants. To modify the required constants, open up ExecFromCollection.vbs with any text editor and change the following values with entries specific to your environment (Make sure you save your changes). Remote Admin password for the vPro Client has already been changed from the factory default. If the remote admin password has been changed, you can modify SelfSignedFix.vbs with the correct password.!http://communities.intel.com/openport/servlet/JiveServlet/downloadImage/38-11443-1772/7.JPG! Critical Note: Prior to executing the SelfSignedFix.vbs, it is imperative that you change the MEBx password in the SelfSignedFix.vbs VBScript to match what is configured in SCCM Component Configuration -> Out Of Band Management -> General Tab -> MEBx Account. Note: An AMT Status of “Detected” can occur for a variety of reasons; in general it means that the SCCM Out of Band Service Point is unable to establish an initial connection with the AMT client. This scenario can also occur when the computer has been previously provisioned for AMT outside Configuration Manager and the password for the AMT Remote Admin Account or the MEBx Account has been changed and is unknown.When trying to provision a vPro Client that has a firmware version less than 3.2.1 that is impacted with the Self-signed Certificate issue, SCCM will forward the request to the Intel WS-MAN Translator (which is required for provisioning and management of a vPro Client less than 3.2.1.) The Intel WS-MAN Translator will handle provisioning the vPro client despite the invalid Self-signed Certificate. The steps listed below should not be required for firmware versions less than 3.2.1 if you have the Intel WS-MAN Translator installed and properly configured.As an interim workaround for vPro Clients 3.2.1 experiencing the issue, you can either locally (through the MEBx) or remotely provision and un-provision the AMT client. The un-provisioning process will regenerate a new Self-signed Certificate within the AMT Management Engine, after which, SCCM can natively use this newly generated certificate to establish the initial secure connection during the provisioning process.Provisioning via Pre-Shared Key (PSK) is not impacted by the Self-signed Certificate issue; however, to leverage PSK provisioning you will need to install / configure the Intel WS-MAN Translator and load the PID/PPS pair into the vPro client. PID/PPS configuration within the vPro client requires either manual configuration via Management Engine BIOS Extension (MEBx) or One Touch Provisioning through USB key import. Log into the MEBx by pressing Ctrl-P during POST When presented with “Change to Intel(R) AMT 1.0 Mode: (Y/N)”, enter “N” When presented with “Verify Password”, re-enter the password. Give the task an appropriate name and in the Command Line field enter in:cscriptserver\share\SelfSignedFix.vbs %COMPUTERNAME% “server\share” N… whereserver\share is the remote share that you created and https://wsmantransurl/ is the secure URL of your Intel WS-MAN Translator. %COMPUTERNAME% is an OS environment variable that will give you the hostname of the client.!http://communities.intel.com/openport/servlet/JiveServlet/downloadImage/38-11443-1766/12.JPG! From the MEBx Menu, select “Intel(R) AMT Configuration” In either case, you will need to root cause why the vPro Client was not remotely accessible to be provisioned / un-provisioned. You can then run SelfSignedFix.vbs at a later time to retry and remotely provision / un-provision. SMSSERVER : This is the FQDN of you SMS Site Server UnprovisionPartialUnprovision_OUTPUTReturnValue = 0**End Execution 8/11/2008 8:22:30 PM*************************In an event that vPro Client is inaccessible to be remotely provisioned / un-provisioned, the error log will look like the following: SMSCollection : This is the SMS Collection ID that you want to enumerate the list of vPro Clients from. You can find the Collection ID of a particular collection by right clicking on the collection and select “Properties”; the Collection ID will be at the bottom of the General Tab!http://communities.intel.com/openport/servlet/JiveServlet/downloadImage/38-11443-1774/9.JPG! WSTransURL : This is the secure URL in which the Intel WS-MAN Translator is listening on cscript SelfSignedFix.vbsvpro-client.vprodemo.com c:\temp N cscript ExecFromCollection.vbs With the MEBx Password modified, here are some examples of how the SelfSignedFix.vbs can be run from the command line: Provision / Un-provision LogSimilar to what is displayed in the previous screen shots, a successful remote Provision / Un-provision log will look like the following: When presented with “Change to Small Business : (Y/N), enter “Y” When presented with “Reset Intel(R) AMT Provisioning: (Y/N), enter “Y” Within the Intel(R) AMT Configuration Menu, select “Provision Model” Note: If you have already changed the MEBx password, the MEBx password will not changed; however, you should still change the SCCMMEBxPassword in SelfSignedFix.vbs VBScript to match your SCCM Configuration in case you run into a vPro Client where you have not changed the MEBx password yet. Using SCCM Advertisement to Execution SelfSignedFix.vbsIn terms of leveraging SCCM Advertisements to push the SelfSignedFix.vbs down to the client and execute it, there are several different ways this could be done. This example simply pulls the SelfSignedFix.vbs off a remote share which is then executed by a SCCM Task Sequence. When the advertisement is picked up by the SCCM Client Agent, the task sequence is executed and SelfSignedFix.vbs is run on the vPro Client machine. Depending on your environment, you may want to leverage alternative methods of deploying and executing this with a SCCM Advertisement. Please note, that the SelfSignedFix.vbs is not performing any provision / un-provision commands locally on the client; although it is running on the local client, the provision / un-provision commands are being routed to the Intel WS-MAN Translator and then the commands are sent back down to the vPro client from the Intel WS-MAN Translator. Once the task sequence is created, you can advertise the task sequence on a Collection you created for just the AMT Detected vPro Clients. After running ExecFromCollection.vbs VBscript, you should be able to do a rediscovery of the Management Controller within SCCM and see that the AMT Status is now reflected as “Not Provision”. With the vPro Client in a “Not Provision” state, SCCM will be able to natively provision the client without issues. For any vPro Clients that remain in a Detected state, review the log files to help isolate the root of their issue. For step- by-step instructions on using ExecFromCollection.vbs, please reference the Guide included in the download package. Depending on your advertisement mandate, the next time the client’s SCCM agent pulls down an updated policy it will execute the task sequence.last_img read more