Installing the new mutual authentication certificate into the
local computer certificate store
Altiris solutions that manage Intel AMT computers require that the mutual
authentication certificate is also installed in the local computer certificate store.
Note:
Perform this procedure on the Notification Server computer.
See
“Creating and installing a client certificate using an Enterprise CA”
on page 100.
To install the certificate into the local computer store
1
On the Notification Server computer, click Start > Run.
2
In the Open box, type
mmc
, and then click OK.
3
In the Microsoft Management Console, click File > Add/Remote Snap-in.
4
Click Add.
5
Click Certificates, and then click Add.
6
Click Computer account, and then click Next.
7
Click Local computer, and then click Finish.
8
Click Certificates, and then click Add.
9
Click My user account, and then click Finish.
10
Click Close.
11
Click OK.
12
In the management console tree, click Console Root > Certificates - Current
User > Personal > Certificates.
13
Copy the mutual authentication certificate that you created (the certificate
that is using the AMT Mutual template) and paste it into the Console Root
> Certificates (Local Computer) > Personal certificate store.
Configuring a connection profile for the Altiris Real-Time
System Manager software
(Optional)
The mutual authentication certificate is used to validate the authenticity of a
managed Intel AMT computer and the Notification Server computer during SOL
and IDE-R communication.
If you want to use the SOL/IDE-R functionality of Intel AMT with Real-Time
System Manager, you must export the mutual authentication certificate to a file.
105
Configuring TLS
Configuring TLS with mutual authentication