MyFavMirrors
/
MeshCentral
mirror of https://github.com/Ylianst/MeshCentral.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
MeshCentral/amtmanager.js

713 lines
39 KiB
JavaScript
Raw Normal View History

First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
/**
Intel AMT manager improvements.
2020-10-07 19:59:44 -04:00
* @description MeshCentral Intel AMT manager
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
* @author Ylian Saint-Hilaire
* @copyright Intel Corporation 2018-2020
* @license Apache-2.0
* @version v0.0.1
*/
/*jslint node: true */
/*jshint node: true */
/*jshint strict:false */
/*jshint -W097 */
/*jshint esversion: 6 */
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
'use strict';
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
module.exports.CreateAmtManager = function(parent) {
var obj = {};
obj.parent = parent;
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
obj.amtDevices = {}; // Nodeid --> [ dev ]
obj.activeLocalConnections = {}; // Host --> [ dev ]
obj.amtAdminAccounts = {}; // DomainId -> [ { user, pass } ]
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
// WSMAN stack
const CreateWsmanComm = require('./amt/amt-wsman-comm');
const WsmanStackCreateService = require('./amt/amt-wsman');
const AmtStackCreateService = require('./amt/amt');
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
const ConnectionTypeStrings = { 0: "CIRA", 1: "Relay", 2: "LMS", 3: "Local" };
// Load the Intel AMT admin accounts credentials for each domain
if ((parent.config != null) && (parent.config.domains != null)) {
for (var domainid in parent.config.domains) {
var domain = parent.config.domains[domainid];
if ((typeof domain.amtmanager == 'object') && (Array.isArray(domain.amtmanager.amtadminaccount) == true)) {
for (var i in domain.amtmanager.amtadminaccount) {
var c = domain.amtmanager.amtadminaccount[i], c2 = { user: 'admin' };
if (typeof c.user == 'string') { c2.user = c.user; }
if (typeof c.pass == 'string') {
c2.pass = c.pass;
if (obj.amtAdminAccounts[domainid] == null) { obj.amtAdminAccounts[domainid] = []; }
obj.amtAdminAccounts[domainid].push(c2);
}
}
}
}
}
// Check if an Intel AMT device is being managed
function isAmtDeviceValid(dev) {
var devices = obj.amtDevices[dev.nodeid];
if (devices == null) return false;
return (devices.indexOf(dev) >= 0)
}
// Add an Intel AMT managed device
function addAmtDevice(dev) {
var devices = obj.amtDevices[dev.nodeid];
if (devices == null) { obj.amtDevices[dev.nodeid] = [dev]; return true; }
if (devices.indexOf(dev) >= 0) { return false; } // This device is already in the list
devices.push(dev); // Add the device to the list
return true;
}
// Remove an Intel AMT managed device
function removeAmtDevice(dev) {
// Find the device in the list
var devices = obj.amtDevices[dev.nodeid];
if (devices == null) return false;
var i = devices.indexOf(dev);
if (i == -1) return false;
// Clean up this device
if (dev.amtstack != null) { dev.amtstack.wsman.comm.FailAllError = 999; delete dev.amtstack; } // Disconnect any active connections.
if (dev.polltimer != null) { clearInterval(dev.polltimer); delete dev.polltimer; }
// Remove the device from the list
devices.splice(i, 1);
if (devices.length == 0) { delete obj.amtDevices[dev.nodeid]; } else { obj.amtDevices[dev.nodeid] = devices; }
return true;
}
// Remove all Intel AMT devices for a given nodeid
function removeDevice(nodeid) {
// Find the devices in the list
var devices = obj.amtDevices[nodeid];
if (devices == null) return false;
for (var i in devices) {
// Clean up this device
var dev = devices[i];
if (dev.amtstack != null) { dev.amtstack.wsman.comm.FailAllError = 999; delete dev.amtstack; } // Disconnect any active connections.
if (dev.polltimer != null) { clearInterval(dev.polltimer); delete dev.polltimer; }
}
// Remove all devices
delete obj.amtDevices[nodeid];
return true;
}
// Start Intel AMT management
obj.startAmtManagement = function (nodeid, connType, connection) {
//if (connType == 3) return; // DEBUG
var devices = obj.amtDevices[nodeid], dev = null;
if (devices != null) { for (var i in devices) { if ((devices[i].mpsConnection == connection) || (devices[i].host == connection)) { dev = devices[i]; } } }
if (dev != null) return false; // We are already managing this device on this connection
dev = { nodeid: nodeid, connType: connType };
if (typeof connection == 'string') { dev.host = connection; }
if (typeof connection == 'object') { dev.mpsConnection = connection; }
parent.debug('amt', "Start Management", nodeid, connType);
addAmtDevice(dev);
fetchIntelAmtInformation(dev);
}
// Stop Intel AMT management
obj.stopAmtManagement = function (nodeid, connType, connection) {
var devices = obj.amtDevices[nodeid], dev = null;
if (devices != null) { for (var i in devices) { if ((devices[i].mpsConnection == connection) || (devices[i].host == connection)) { dev = devices[i]; } } }
if (dev == null) return false; // We are not managing this device on this connection
parent.debug('amt', "Stop Management", nodeid, connType);
return removeAmtDevice(dev);
}
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
// Get a string status of the managed devices
obj.getStatusString = function () {
var r = '';
for (var nodeid in obj.amtDevices) {
var devices = obj.amtDevices[nodeid];
r += devices[0].nodeid + ', ' + devices[0].name + '\r\n';
for (var i in devices) {
var dev = devices[i];
var items = [];
if (dev.state == 1) { items.push('Connected'); } else { items.push('Trying'); }
items.push(ConnectionTypeStrings[dev.connType]);
if (dev.connType == 3) { items.push(dev.host); }
if (dev.polltimer != null) { items.push('Polling Power'); }
r += ' ' + items.join(', ') + '\r\n';
}
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
}
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (r == '') { r = "No managed Intel AMT devices"; }
return r;
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
}
// Subscribe to server events
parent.AddEventDispatch(['*'], obj);
// Handle server events
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
// Make sure to only manage devices with connections to this server. In a multi-server setup, we don't want multiple managers talking to the same device.
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
obj.HandleEvent = function (source, event, ids, id) {
Many Intel AMT improvements.
2020-10-09 18:44:09 -04:00
switch (event.action) {
case 'removenode': { // React to node being removed
removeDevice(event.nodeid);
break;
}
case 'wakedevices': { // React to node wakeup command, perform Intel AMT wake if possible
if (Array.isArray(event.nodeids)) { for (var i in event.nodeids) { performPowerAction(event.nodeids[i], 2); } }
break;
}
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
case 'changenode': { // React to changes in a device
var devices = obj.amtDevices[event.nodeid];
if (devices = null) break; // We are not managing this device
Many Intel AMT improvements.
2020-10-09 18:44:09 -04:00
if (event.amtchange === 1) {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
// TODO
Many Intel AMT improvements.
2020-10-09 18:44:09 -04:00
} else {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
/*
Many Intel AMT improvements.
2020-10-09 18:44:09 -04:00
var dev = obj.amtDevices[event.nodeid];
if (dev != null) {
var amtchange = 0;
if (dev.name != event.node.name) { dev.name = event.node.name; }
if (dev.host != event.node.host) {
dev.host = event.node.host;
// The host has changed, if we are connected to this device locally, we need to reset.
if ((dev.conn & 4) != 0) { removeDevice(dev.nodeid); return; } // We are going to wait for the AMT scanned to find this device again.
}
AMT manager improvements.
2020-10-07 19:41:14 -04:00
}
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
*/
AMT manager improvements.
2020-10-07 19:41:14 -04:00
}
Many Intel AMT improvements.
2020-10-09 18:44:09 -04:00
break;
AMT manager improvements.
2020-10-07 19:41:14 -04:00
}
}
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
}
// Update information about a device
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
function fetchIntelAmtInformation(dev) {
parent.db.Get(dev.nodeid, function (err, nodes) {
if ((nodes == null) || (nodes.length != 1)) { removeAmtDevice(dev); return; }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
const node = nodes[0];
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if ((node.intelamt == null) || (node.meshid == null)) { removeAmtDevice(dev); return; }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
const mesh = parent.webserver.meshes[node.meshid];
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (mesh == null) { removeAmtDevice(dev); return; }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
if (dev == null) { return; }
dev.name = node.name;
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
//if (node.host) { dev.host = node.host.toLowerCase(); }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
dev.meshid = node.meshid;
dev.intelamt = node.intelamt;
Many Intel AMT improvements.
2020-10-09 18:44:09 -04:00
attemptInitialContact(dev);
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
});
}
// Attempt to perform initial contact with Intel AMT
Many Intel AMT improvements.
2020-10-09 18:44:09 -04:00
function attemptInitialContact(dev) {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
parent.debug('amt', "Attempt Initial Contact", dev.name, dev.connType);
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
if ((dev.acctry == null) && ((typeof dev.intelamt.user != 'string') || (typeof dev.intelamt.pass != 'string'))) {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if ((obj.amtAdminAccounts[dev.domainid] != null) && (obj.amtAdminAccounts[dev.domainid].length > 0)) { dev.acctry = 0; } else { return; }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
}
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
switch (dev.connType) {
case 0: // CIRA
// Handle the case where the Intel AMT CIRA is connected (connType 0)
// In this connection type, we look at the port bindings to see if we need to do TLS or not.
First version with CIRA support in AMT Manager.
2020-10-08 15:50:27 -04:00
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
// Check to see if CIRA is connected on this server.
var ciraconn = dev.mpsConnection;
if ((ciraconn == null) || (ciraconn.tag == null) || (ciraconn.tag.boundPorts == null)) { removeAmtDevice(dev); return; } // CIRA connection is not on this server, no need to deal with this device anymore.
Many Intel AMT improvements.
2020-10-09 18:44:09 -04:00
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
// See what user/pass to try.
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
var user = null, pass = null;
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (dev.acctry == null) { user = dev.intelamt.user; pass = dev.intelamt.pass; } else { user = obj.amtAdminAccounts[dev.domainid][dev.acctry].user; pass = obj.amtAdminAccounts[dev.domainid][dev.acctry].pass; }
// See if we need to perform TLS or not. We prefer not to do TLS within CIRA.
var dotls = -1;
if (ciraconn.tag.boundPorts.indexOf('16992')) { dotls = 0; }
else if (ciraconn.tag.boundPorts.indexOf('16993')) { dotls = 1; }
if (dotls == -1) { removeDevice(dev.nodeid); return; } // The Intel AMT ports are not open, not a device we can deal with.
// Connect now
parent.debug('amt', 'CIRA-Connect', (dotls == 1) ? "TLS" : "NoTLS", dev.name, user, pass);
var comm;
if (dotls == 1) {
comm = CreateWsmanComm(dev.nodeid, 16993, user, pass, 1, null, ciraconn); // Perform TLS
comm.xtlsFingerprint = 0; // Perform no certificate checking
} else {
comm = CreateWsmanComm(dev.nodeid, 16992, user, pass, 0, null, ciraconn); // No TLS
}
var wsstack = WsmanStackCreateService(comm);
dev.amtstack = AmtStackCreateService(wsstack);
dev.amtstack.dev = dev;
obj.activeLocalConnections[dev.host] = dev;
dev.amtstack.BatchEnum(null, ['*AMT_GeneralSettings', '*IPS_HostBasedSetupService'], attemptLocalConnectResponse);
break;
case 1:
case 2:
// Handle the case where the Intel AMT relay or LMS is connected (connType 1 or 2)
// Check to see if CIRA is connected on this server.
var ciraconn = dev.mpsConnection;
if ((ciraconn == null) || (ciraconn.tag == null) || (ciraconn.tag.boundPorts == null)) { removeAmtDevice(dev); return; } // Relay connection not valid
// See what user/pass to try.
var user = null, pass = null;
if (dev.acctry == null) { user = dev.intelamt.user; pass = dev.intelamt.pass; } else { user = obj.amtAdminAccounts[dev.domainid][dev.acctry].user; pass = obj.amtAdminAccounts[dev.domainid][dev.acctry].pass; }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
// Connect now
var comm;
if (dev.tlsfail !== true) {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
parent.debug('amt', 'Relay-Connect', "TLS", dev.name, user, pass);
comm = CreateWsmanComm(dev.nodeid, 16993, user, pass, 1, null, ciraconn); // Perform TLS
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
comm.xtlsFingerprint = 0; // Perform no certificate checking
} else {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
parent.debug('amt', 'Relay-Connect', "NoTLS", dev.name, user, pass);
comm = CreateWsmanComm(dev.nodeid, 16992, user, pass, 0, null, ciraconn); // No TLS
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
}
var wsstack = WsmanStackCreateService(comm);
dev.amtstack = AmtStackCreateService(wsstack);
dev.amtstack.dev = dev;
obj.activeLocalConnections[dev.host] = dev;
First version with CIRA support in AMT Manager.
2020-10-08 15:50:27 -04:00
dev.amtstack.BatchEnum(null, ['*AMT_GeneralSettings', '*IPS_HostBasedSetupService'], attemptLocalConnectResponse);
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
break;
case 3:
// Handle the case where the Intel AMT local scanner found the device (connType 3)
parent.debug('amt', "Attempt Initial Local Contact", dev.name, dev.connType, dev.host);
if (typeof dev.host != 'string') { removeAmtDevice(dev); return; } // Local connection not valid
// Since we don't allow two or more connections to the same host, check if a pending connection is active.
if (obj.activeLocalConnections[dev.host] != null) {
// Active connection, hold and try later.
var tryAgainFunc = function tryAgainFunc() { if (obj.amtDevices[tryAgainFunc.dev.nodeid] != null) { attemptInitialContact(tryAgainFunc.dev); } }
tryAgainFunc.dev = dev;
setTimeout(tryAgainFunc, 5000);
} else {
// No active connections, see what user/pass to try.
var user = null, pass = null;
if (dev.acctry == null) { user = dev.intelamt.user; pass = dev.intelamt.pass; } else { user = obj.amtAdminAccounts[dev.domainid][dev.acctry].user; pass = obj.amtAdminAccounts[dev.domainid][dev.acctry].pass; }
// Connect now
var comm;
if (dev.tlsfail !== true) {
parent.debug('amt', 'Direct-Connect', "TLS", dev.name, dev.host, user, pass);
comm = CreateWsmanComm(dev.host, 16993, user, pass, 1); // Always try with TLS first
comm.xtlsFingerprint = 0; // Perform no certificate checking
} else {
parent.debug('amt', 'Direct-Connect', "NoTLS", dev.name, dev.host, user, pass);
comm = CreateWsmanComm(dev.host, 16992, user, pass, 0); // Try without TLS
}
var wsstack = WsmanStackCreateService(comm);
dev.amtstack = AmtStackCreateService(wsstack);
dev.amtstack.dev = dev;
obj.activeLocalConnections[dev.host] = dev;
dev.amtstack.BatchEnum(null, ['*AMT_GeneralSettings', '*IPS_HostBasedSetupService'], attemptLocalConnectResponse);
dev.conntype = 1; // LOCAL
}
break;
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
}
}
First version with CIRA support in AMT Manager.
2020-10-08 15:50:27 -04:00
function attemptLocalConnectResponse(stack, name, responses, status) {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
const dev = stack.dev;
parent.debug('amt', "Initial Contact Response", dev.name, status);
First version with CIRA support in AMT Manager.
2020-10-08 15:50:27 -04:00
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
// If this is a local connection device, release active connection to this host.
if (dev.connType == 3) { delete obj.activeLocalConnections[dev.host]; }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
// Check if the device still exists
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (isAmtDeviceValid(dev) == false) return; // Device no longer exists, ignore this request.
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
// Check the response
if ((status == 200) && (responses['AMT_GeneralSettings'] != null) && (responses['IPS_HostBasedSetupService'] != null) && (responses['IPS_HostBasedSetupService'].response != null) && (responses['IPS_HostBasedSetupService'].response != null) && (stack.wsman.comm.digestRealm == responses['AMT_GeneralSettings'].response.DigestRealm)) {
// Everything looks good
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
dev.state = 1;
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
if (dev.aquired == null) { dev.aquired = {}; }
dev.aquired.controlMode = responses['IPS_HostBasedSetupService'].response.CurrentControlMode; // 1 = CCM, 2 = ACM
var verSplit = stack.wsman.comm.amtVersion.split('.');
AMT manager improvements.
2020-10-07 19:41:14 -04:00
if (verSplit.length >= 3) { dev.aquired.version = verSplit[0] + '.' + verSplit[1] + '.' + verSplit[2]; dev.aquired.majorver = parseInt(verSplit[0]); }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
dev.aquired.realm = stack.wsman.comm.digestRealm;
dev.aquired.user = stack.wsman.comm.user;
dev.aquired.pass = stack.wsman.comm.pass;
dev.aquired.lastContact = Date.now();
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if ((dev.connType == 1) || (dev.connType == 3)) { dev.aquired.tls = stack.wsman.comm.xtls; } // Only set the TLS state if in relay or local mode. When using CIRA, this is auto-detected.
AMT manager improvements.
2020-10-07 19:41:14 -04:00
if (stack.wsman.comm.xtls == 1) { dev.aquired.hash = stack.wsman.comm.xtlsCertificate.fingerprint.split(':').join('').toLowerCase(); } else { delete dev.aquired.hash; }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
UpdateDevice(dev);
Intel AMT manager improvements.
2020-10-07 19:59:44 -04:00
Added Intel AMT clock sync.
2020-10-14 17:57:54 -04:00
// Perform Intel AMT clock sync
attemptSyncClock(dev, function () {
attemptFetchHardwareInventory(dev); // See if we need to get hardware inventory
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (dev.connType != 2) {
// Start power polling if not connected to LMS
var ppfunc = function powerPoleFunction() { fetchPowerState(powerPoleFunction.dev); }
ppfunc.dev = dev;
dev.polltimer = new setTimeout(ppfunc, 290000); // Poll for power state every 4 minutes 50 seconds.
fetchPowerState(dev);
}
Added Intel AMT clock sync.
2020-10-14 17:57:54 -04:00
});
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
} else {
// We got a bad response
First version with CIRA support in AMT Manager.
2020-10-08 15:50:27 -04:00
if ((dev.conntype == 1) && (dev.tlsfail !== true) && (status == 408)) {
// TLS error on a local connection, try again without TLS
Many Intel AMT improvements.
2020-10-09 18:44:09 -04:00
dev.tlsfail = true; attemptInitialContact(dev); return;
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
} else if (status == 401) {
// Authentication error, see if we can use alternative credentials
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if ((dev.acctry == null) && (obj.amtAdminAccounts[dev.domainid] != null) && (obj.amtAdminAccounts[dev.domainid].length > 0)) { dev.acctry = 0; attemptInitialContact(dev); return; }
if ((dev.acctry != null) && (obj.amtAdminAccounts[dev.domainid] != null) && (obj.amtAdminAccounts[dev.domainid].length > (dev.acctry + 1))) { dev.acctry++; attemptInitialContact(dev); return; }
AMT manager will now clear device credentials if they don't work.
2020-10-07 15:30:29 -04:00
// We are unable to authenticate to this device, clear Intel AMT credentials.
ClearDeviceCredentials(dev);
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
}
Intel AMT manager improvements.
2020-10-07 19:59:44 -04:00
//console.log(dev.nodeid, dev.name, dev.host, status, 'Bad response');
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
removeAmtDevice(dev);
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
}
}
// Change the current core information string and event it
function UpdateDevice(dev) {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (isAmtDeviceValid(dev) == false) return; // Device no longer exists, ignore this request.
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
// Check that the mesh exists
const mesh = parent.webserver.meshes[dev.meshid];
if (mesh == null) { removeDevice(dev.nodeid); return false; }
// Get the node and change it if needed
parent.db.Get(dev.nodeid, function (err, nodes) {
if ((nodes == null) || (nodes.length != 1)) { return false; }
const device = nodes[0];
var changes = [], change = 0, log = 0;
var domain = parent.config.domains[device.domain];
if (domain == null) { return false; }
// Check if anything changes
if (device.intelamt == null) { device.intelamt = {}; }
if (dev.aquired.version && (typeof dev.aquired.version == 'string') && (dev.aquired.version != device.intelamt.ver)) { change = 1; log = 1; device.intelamt.ver = dev.aquired.version; changes.push('AMT version'); }
if (dev.aquired.user && (typeof dev.aquired.user == 'string') && (dev.aquired.user != device.intelamt.user)) { change = 1; log = 1; device.intelamt.user = dev.aquired.user; changes.push('AMT user'); }
if (dev.aquired.pass && (typeof dev.aquired.pass == 'string') && (dev.aquired.pass != device.intelamt.pass)) { change = 1; log = 1; device.intelamt.pass = dev.aquired.pass; changes.push('AMT pass'); }
if (dev.aquired.realm && (typeof dev.aquired.realm == 'string') && (dev.aquired.realm != device.intelamt.realm)) { change = 1; log = 1; device.intelamt.realm = dev.aquired.realm; changes.push('AMT realm'); }
AMT manager improvements.
2020-10-07 19:41:14 -04:00
if (dev.aquired.hash && (typeof dev.aquired.hash == 'string') && (dev.aquired.hash != device.intelamt.hash)) { change = 1; log = 1; device.intelamt.hash = dev.aquired.hash; changes.push('AMT hash'); }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
if (device.intelamt.state != 2) { change = 1; log = 1; device.intelamt.state = 2; changes.push('AMT state'); }
// Update Intel AMT flags if needed
// dev.aquired.controlMode // 1 = CCM, 2 = ACM
// (node.intelamt.flags & 2) == CCM, (node.intelamt.flags & 4) == ACM
var flags = 0;
if (typeof device.intelamt.flags == 'number') { flags = device.intelamt.flags; }
if (dev.aquired.controlMode == 1) { if ((flags & 4) != 0) { flags -= 4; } if ((flags & 2) == 0) { flags += 2; } } // CCM
if (dev.aquired.controlMode == 2) { if ((flags & 4) == 0) { flags += 4; } if ((flags & 2) != 0) { flags -= 2; } } // ACM
if (device.intelamt.flags != flags) { change = 1; log = 1; device.intelamt.flags = flags; changes.push('AMT flags'); }
// If there are changes, event the new device
if (change == 1) {
// Save to the database
parent.db.Set(device);
// Event the node change
var event = { etype: 'node', action: 'changenode', nodeid: device._id, domain: domain.id, node: parent.webserver.CloneSafeNode(device) };
if (changes.length > 0) { event.msg = 'Changed device ' + device.name + ' from group ' + mesh.name + ': ' + changes.join(', '); }
if ((log == 0) || ((obj.agentInfo) && (obj.agentInfo.capabilities) && (obj.agentInfo.capabilities & 0x20)) || (changes.length == 0)) { event.nolog = 1; } // If this is a temporary device, don't log changes
if (parent.db.changeStream) { event.noact = 1; } // If DB change stream is active, don't use this event to change the node. Another event will come.
parent.DispatchEvent(parent.webserver.CreateMeshDispatchTargets(device.meshid, [device._id]), obj, event);
}
});
}
AMT manager will now clear device credentials if they don't work.
2020-10-07 15:30:29 -04:00
// Change the current core information string and event it
function ClearDeviceCredentials(dev) {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (isAmtDeviceValid(dev) == false) return; // Device no longer exists, ignore this request.
AMT manager will now clear device credentials if they don't work.
2020-10-07 15:30:29 -04:00
// Check that the mesh exists
const mesh = parent.webserver.meshes[dev.meshid];
if (mesh == null) { removeDevice(dev.nodeid); return; }
// Get the node and change it if needed
parent.db.Get(dev.nodeid, function (err, nodes) {
if ((nodes == null) || (nodes.length != 1)) return;
const device = nodes[0];
var changes = [], change = 0, log = 0;
var domain = parent.config.domains[device.domain];
if (domain == null) return;
// Check if anything changes
if (device.intelamt == null) return;
if (device.intelamt.user != null) { change = 1; log = 1; delete device.intelamt.user; changes.push('AMT user'); }
if (device.intelamt.pass != null) { change = 1; log = 1; delete device.intelamt.pass; changes.push('AMT pass'); }
// If there are changes, event the new device
if (change == 1) {
// Save to the database
parent.db.Set(device);
// Event the node change
var event = { etype: 'node', action: 'changenode', nodeid: device._id, domain: domain.id, node: parent.webserver.CloneSafeNode(device) };
if (changes.length > 0) { event.msg = 'Changed device ' + device.name + ' from group ' + mesh.name + ': ' + changes.join(', '); }
if ((log == 0) || ((obj.agentInfo) && (obj.agentInfo.capabilities) && (obj.agentInfo.capabilities & 0x20)) || (changes.length == 0)) { event.nolog = 1; } // If this is a temporary device, don't log changes
if (parent.db.changeStream) { event.noact = 1; } // If DB change stream is active, don't use this event to change the node. Another event will come.
parent.DispatchEvent(parent.webserver.CreateMeshDispatchTargets(device.meshid, [device._id]), obj, event);
}
});
}
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
// Get the current power state of a device
function fetchPowerState(dev) {
if (isAmtDeviceValid(dev) == false) return;
// Check if the agent is connected
var constate = parent.GetConnectivityState(dev.nodeid);
if ((constate == null) || (constate.connectivity & 1)) return; // If there is no connectivity or the agent is connected, skip trying to poll power state.
// Fetch the power state
dev.amtstack.BatchEnum(null, ['CIM_ServiceAvailableToElement'], function (stack, name, responses, status) {
const dev = stack.dev;
if (obj.amtDevices[dev.nodeid] == null) return; // Device no longer exists, ignore this response.
if ((status != 200) || (responses['CIM_ServiceAvailableToElement'] == null) || (responses['CIM_ServiceAvailableToElement'].responses == null) || (responses['CIM_ServiceAvailableToElement'].responses.length < 1)) return; // If the polling fails, just skip it.
var powerstate = responses['CIM_ServiceAvailableToElement'].responses[0].PowerState;
if ((powerstate == 2) && (dev.aquired.majorver > 9)) {
// Device is powered on and Intel AMT 10+, poll the OS power state.
dev.amtstack.Get('IPS_PowerManagementService', function (stack, name, response, status) {
const dev = stack.dev;
if (obj.amtDevices[dev.nodeid] == null) return; // Device no longer exists, ignore this response.
if (status != 200) return;
// Convert the OS power state
var meshPowerState = -1;
if (response.Body.OSPowerSavingState == 2) { meshPowerState = 1; } // Fully powered (S0);
else if (response.Body.OSPowerSavingState == 3) { meshPowerState = 2; } // Modern standby (We are going to call this S1);
// Set OS power state
if (meshPowerState >= 0) { parent.SetConnectivityState(dev.meshid, dev.nodeid, Date.now(), 4, meshPowerState); }
});
} else {
// Convert the power state
// AMT power: 1 = Other, 2 = On, 3 = Sleep-Light, 4 = Sleep-Deep, 5 = Power Cycle (Off-Soft), 6 = Off-Hard, 7 = Hibernate (Off-Soft), 8 = Off-Soft, 9 = Power Cycle (Off-Hard), 10 = Master Bus Reset, 11 = Diagnostic Interrupt (NMI), 12 = Off-Soft Graceful, 13 = Off-Hard Graceful, 14 = Master Bus Reset Graceful, 15 = Power Cycle (Off- oft Graceful), 16 = Power Cycle (Off - Hard Graceful), 17 = Diagnostic Interrupt (INIT)
// Mesh power: 0 = Unknown, 1 = S0 power on, 2 = S1 Sleep, 3 = S2 Sleep, 4 = S3 Sleep, 5 = S4 Hibernate, 6 = S5 Soft-Off, 7 = Present
var meshPowerState = -1, powerConversionTable = [-1, -1, 1, 2, 3, 6, 6, 5, 6];
if (powerstate < powerConversionTable.length) { meshPowerState = powerConversionTable[powerstate]; } else { powerstate = 6; }
// Set power state
if (meshPowerState >= 0) { parent.SetConnectivityState(dev.meshid, dev.nodeid, Date.now(), 4, meshPowerState); }
}
});
}
// Perform a power action: 2 = Power up, 5 = Power cycle, 8 = Power down, 10 = Reset
function performPowerAction(nodeid, action) {
var devices = obj.amtDevices[nodeid];
if (devices == null) return;
for (var i in devices) {
var dev = devices[i];
if (dev.amtstack != null) {
// TODO: Check if the device passed initial connection
try { dev.amtstack.RequestPowerStateChange(action, performPowerActionResponse); } catch (ex) { }
}
}
}
// Response to Intel AMT power action
function performPowerActionResponse(stack, name, responses, status) {
//console.log('performPowerActionResponse', status);
}
Added Intel AMT clock sync.
2020-10-14 17:57:54 -04:00
// Attempt to sync the Intel AMT clock if needed, call func back when done.
// Care should be take not to have many pending WSMAN called when performing clock sync.
function attemptSyncClock(dev, func) {
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (isAmtDeviceValid(dev) == false) return; // Device no longer exists, ignore this request.
Added Intel AMT clock sync.
2020-10-14 17:57:54 -04:00
dev.clockSyncCompleted = func;
dev.amtstack.AMT_TimeSynchronizationService_GetLowAccuracyTimeSynch(attemptSyncClockEx);
}
// Intel AMT clock query response
function attemptSyncClockEx(stack, name, response, status) {
const dev = stack.dev;
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (isAmtDeviceValid(dev) == false) return; // Device no longer exists, ignore this request.
Added Intel AMT clock sync.
2020-10-14 17:57:54 -04:00
if (status != 200) { removeDevice(dev.nodeid); }
// Compute how much drift between Intel AMT and our clock.
var t = new Date(), now = new Date();
t.setTime(response.Body['Ta0'] * 1000);
if (Math.abs(t - now) > 10000) { // If the Intel AMT clock is more than 10 seconds off, set it.
var Tm1 = Math.round(now.getTime() / 1000);
dev.amtstack.AMT_TimeSynchronizationService_SetHighAccuracyTimeSynch(response.Body['Ta0'], Tm1, Tm1, attemptSyncClockSet);
} else {
// Clock is fine, we are done.
if (dev.clockSyncCompleted != null) { var f = dev.clockSyncCompleted; delete dev.clockSyncCompleted; f(); }
}
}
// Intel AMT clock set response
function attemptSyncClockSet(stack, name, responses, status) {
const dev = stack.dev;
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (isAmtDeviceValid(dev) == false) return; // Device no longer exists, ignore this request.
Added Intel AMT clock sync.
2020-10-14 17:57:54 -04:00
if (status != 200) { removeDevice(dev.nodeid); }
if (dev.clockSyncCompleted != null) { var f = dev.clockSyncCompleted; delete dev.clockSyncCompleted; f(); }
}
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
function attemptFetchHardwareInventory(dev) {
if (obj.amtDevices[dev.nodeid] == null) return false; // Device no longer exists, ignore this request.
const mesh = parent.webserver.meshes[dev.meshid];
if (mesh == null) { removeDevice(dev.nodeid); return false; }
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
if (mesh.mtype == 1) { // If this is a Intel AMT only device group, pull the hardware inventory and network information for this device
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
dev.amtstack.BatchEnum('', ['*CIM_ComputerSystemPackage', 'CIM_SystemPackaging', '*CIM_Chassis', 'CIM_Chip', '*CIM_Card', '*CIM_BIOSElement', 'CIM_Processor', 'CIM_PhysicalMemory', 'CIM_MediaAccessDevice', 'CIM_PhysicalPackage'], attemptFetchHardwareInventoryResponse);
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
dev.amtstack.BatchEnum('', ['AMT_EthernetPortSettings'], attemptFetchNetworkResponse);
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
return true;
}
return false;
}
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
function attemptFetchNetworkResponse(stack, name, responses, status) {
const dev = stack.dev;
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (isAmtDeviceValid(dev) == false) return; // Device no longer exists, ignore this request.
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
if (status != 200) return;
//console.log(JSON.stringify(responses, null, 2));
if ((responses['AMT_EthernetPortSettings'] == null) || (responses['AMT_EthernetPortSettings'].responses == null)) return;
// Find the wired and wireless interfaces
var wired = null, wireless = null;
for (var i in responses['AMT_EthernetPortSettings'].responses) {
var netif = responses['AMT_EthernetPortSettings'].responses[i];
Intel AMT manager improvements.
2020-10-07 19:59:44 -04:00
if ((netif.MACAddress != null) && (netif.MACAddress != '00-00-00-00-00-00')) {
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
if (netif.WLANLinkProtectionLevel != null) { wireless = netif; } else { wired = netif; }
}
}
if ((wired == null) && (wireless == null)) return;
// Sent by the agent to update agent network interface information
var net = { netif2: {} };
if (wired != null) {
var x = {};
x.family = 'IPv4';
Intel AMT manager improvements.
2020-10-07 19:59:44 -04:00
x.type = 'ethernet';
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
x.address = wired.IPAddress;
x.netmask = wired.SubnetMask;
x.mac = wired.MACAddress.split('-').join(':').toUpperCase();
x.gateway = wired.DefaultGateway;
net.netif2['Ethernet'] = [ x ];
}
if (wireless != null) {
var x = {};
x.family = 'IPv4';
Intel AMT manager improvements.
2020-10-07 19:59:44 -04:00
x.type = 'wireless';
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
x.address = wireless.IPAddress;
x.netmask = wireless.SubnetMask;
x.mac = wireless.MACAddress.split('-').join(':').toUpperCase();
x.gateway = wireless.DefaultGateway;
net.netif2['Wireless'] = [ x ];
}
net.updateTime = Date.now();
net._id = 'if' + dev.nodeid;
net.type = 'ifinfo';
parent.db.Set(net);
// Event the node interface information change
parent.DispatchEvent(parent.webserver.CreateMeshDispatchTargets(dev.meshid, [dev.nodeid]), obj, { action: 'ifchange', nodeid: dev.nodeid, domain: dev.nodeid.split('/')[1], nolog: 1 });
}
/*
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
// http://www.dmtf.org/sites/default/files/standards/documents/DSP0134_2.7.1.pdf
const DMTFCPUStatus = ["Unknown", "Enabled", "Disabled by User", "Disabled By BIOS (POST Error)", "Idle", "Other"];
const DMTFMemType = ["Unknown", "Other", "DRAM", "Synchronous DRAM", "Cache DRAM", "EDO", "EDRAM", "VRAM", "SRAM", "RAM", "ROM", "Flash", "EEPROM", "FEPROM", "EPROM", "CDRAM", "3DRAM", "SDRAM", "SGRAM", "RDRAM", "DDR", "DDR-2", "BRAM", "FB-DIMM", "DDR3", "FBD2", "DDR4", "LPDDR", "LPDDR2", "LPDDR3", "LPDDR4"];
const DMTFMemFormFactor = ['', "Other", "Unknown", "SIMM", "SIP", "Chip", "DIP", "ZIP", "Proprietary Card", "DIMM", "TSOP", "Row of chips", "RIMM", "SODIMM", "SRIMM", "FB-DIM"];
const DMTFProcFamilly = { // Page 46 of DMTF document
191: "Intel&reg; Core&trade; 2 Duo Processor",
192: "Intel&reg; Core&trade; 2 Solo processor",
193: "Intel&reg; Core&trade; 2 Extreme processor",
194: "Intel&reg; Core&trade; 2 Quad processor",
195: "Intel&reg; Core&trade; 2 Extreme mobile processor",
196: "Intel&reg; Core&trade; 2 Duo mobile processor",
197: "Intel&reg; Core&trade; 2 Solo mobile processor",
198: "Intel&reg; Core&trade; i7 processor",
199: "Dual-Core Intel&reg; Celeron&reg; processor"
};
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
*/
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
function attemptFetchHardwareInventoryResponse(stack, name, responses, status) {
const dev = stack.dev;
Intel AMT manager overhall, many improvements.
2020-10-15 19:08:36 -04:00
if (isAmtDeviceValid(dev) == false) return; // Device no longer exists, ignore this request.
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
if (status != 200) return;
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
// Extract basic data
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
var hw = {}
hw.PlatformGUID = responses['CIM_ComputerSystemPackage'].response.PlatformGUID;
hw.Chassis = responses['CIM_Chassis'].response;
hw.Chips = responses['CIM_Chip'].responses;
hw.Card = responses['CIM_Card'].response;
hw.Bios = responses['CIM_BIOSElement'].response;
hw.Processors = responses['CIM_Processor'].responses;
hw.PhysicalMemory = responses['CIM_PhysicalMemory'].responses;
hw.MediaAccessDevice = responses['CIM_MediaAccessDevice'].responses;
hw.PhysicalPackage = responses['CIM_PhysicalPackage'].responses;
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
// Convert the hardware data into the same structure as we get from Windows
var hw2 = { hardware: { windows: {}, identifiers: {} } };
hw2.hardware.identifiers.product_uuid = guidToStr(hw.PlatformGUID);
if ((hw.PhysicalMemory != null) && (hw.PhysicalMemory.length > 0)) {
var memory = [];
for (var i in hw.PhysicalMemory) {
var m2 = {}, m = hw.PhysicalMemory[i];
m2.BankLabel = m.BankLabel;
m2.Capacity = m.Capacity;
m2.PartNumber = m.PartNumber.trim();
m2.SerialNumber = m.SerialNumber.trim();
m2.Manufacturer = m.Manufacturer.trim();
memory.push(m2);
}
hw2.hardware.windows.memory = memory;
}
if ((hw.MediaAccessDevice != null) && (hw.MediaAccessDevice.length > 0)) {
var drives = [];
for (var i in hw.MediaAccessDevice) {
var m2 = {}, m = hw.MediaAccessDevice[i];
m2.Caption = m.DeviceID;
m2.Size = (m.MaxMediaSize * 1000);
drives.push(m2);
}
hw2.hardware.identifiers.storage_devices = drives;
}
if (hw.Bios != null) {
hw2.hardware.identifiers.bios_vendor = hw.Bios.Manufacturer.trim();
hw2.hardware.identifiers.bios_version = hw.Bios.Version;
if (hw.Bios.ReleaseDate && hw.Bios.ReleaseDate.Datetime) { hw2.hardware.identifiers.bios_date = hw.Bios.ReleaseDate.Datetime; }
}
if (hw.PhysicalPackage != null) {
hw2.hardware.identifiers.board_name = hw.Card.Model.trim();
hw2.hardware.identifiers.board_vendor = hw.Card.Manufacturer.trim();
hw2.hardware.identifiers.board_version = hw.Card.Version.trim();
hw2.hardware.identifiers.board_serial = hw.Card.SerialNumber.trim();
}
if ((hw.Chips != null) && (hw.Chips.length > 0)) {
for (var i in hw.Chips) {
if ((hw.Chips[i].ElementName == 'Managed System Processor Chip') && (hw.Chips[i].Version)) {
hw2.hardware.identifiers.cpu_name = hw.Chips[i].Version;
}
}
}
// Compute the hash of the document
hw2.hash = parent.crypto.createHash('sha384').update(JSON.stringify(hw2)).digest().toString('hex');
// Fetch system information
parent.db.GetHash('si' + dev.nodeid, function (err, results) {
var sysinfohash = null;
if ((results != null) && (results.length == 1)) { sysinfohash = results[0].hash; }
if (sysinfohash != hw2.hash) {
// Hardware information has changed, update the database
hw2._id = 'si' + dev.nodeid;
hw2.domain = dev.nodeid.split('/')[1];
hw2.time = Date.now();
hw2.type = 'sysinfo';
parent.db.Set(hw2);
// Event the new sysinfo hash, this will notify everyone that the sysinfo document was changed
var event = { etype: 'node', action: 'sysinfohash', nodeid: dev.nodeid, domain: hw2.domain, hash: hw2.hash, nolog: 1 };
parent.DispatchEvent(parent.webserver.CreateMeshDispatchTargets(dev.meshid, [dev.nodeid]), obj, event);
}
});
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
}
Intel AMT manager can now pull hardware and network information from Intel AMT when on LAN.
2020-10-07 15:03:19 -04:00
function guidToStr(g) { return g.substring(6, 8) + g.substring(4, 6) + g.substring(2, 4) + g.substring(0, 2) + '-' + g.substring(10, 12) + g.substring(8, 10) + '-' + g.substring(14, 16) + g.substring(12, 14) + '-' + g.substring(16, 20) + '-' + g.substring(20); }
First version with Intel AMT Manager module.
2020-10-06 22:47:28 -04:00
return obj;
};