Fix typo: dev.temp.password -> dev.temp.pass in TLS-ACM activation (#7847)
In activateIntelAmtTlsAcm(), the selected AMT password is stored as dev.temp.pass. activateIntelAmtTlsAcmEx1() logs that same field at line 2889, but then assigns dev.aquired.pass = dev.temp.password at line 2895. No code in this flow writes dev.temp.password, so dev.aquired.pass becomes undefined. The TLS ACM admin-password call then computes the Digest HA1 from dev.aquired.pass at line 2905 (or line 2917 after the MEBx-password branch), making the configured AMT admin credential deterministic. The parallel CCM (lines 2689, 2717) and non-TLS ACM (lines 2977, 3034) activation paths already use dev.temp.pass correctly.
Adam DeWolf committed
May 28, 2026 at 14:15 UTC
32c9f44fbcd268f0c0622fc3ac2351c2ae395da6
1 file changed
+1
-1
amtmanager.js
+1
-1
@@ -2892,7 +2892,7 @@ module.exports.CreateAmtManager = function (parent) {
2892
2893
// See what admin password to use
2894
dev.aquired.user = 'admin';
2895
- dev.aquired.pass = dev.temp.password;
2895
+ dev.aquired.pass = dev.temp.pass;
2896
2897
// Set the account password
2898
if (typeof dev.temp.mebxpass == 'string') {