To convert the certificate to PEM format
1
From the Notification Server computer, download and install the openssl.exe
utility.
For example, you can download the utility from the following Web site:
http://www.slproweb.com/products/Win32OpenSSL.html
For more information on OpenSSL, visit
http://www.openssl.org/
2
Click Start > Run.
3
In the Open box, type
cmd
, and then click OK.
4
Navigate to the location of the Openssl utility.
For example,
C:\OpenSSL\bin
5
Run the following command:
openssl pkcs12 -in <infile.pfx> -out
<outfile.pem>
where
<infile.pfx>
is the path to the mutual authentication
certificate that you just exported, and
<outfile.pem>
is a name of the new
converted certificate.
Remember the PEM pass phrase for later use.
To configure a connection profile
1
In the Symantec Management Console, on the Settings menu, click All
Settings.
2
In the left pane, click Monitoring and Alerting > Protocol Management >
Connection Profiles > Manage Connection Profiles.
3
Click the connection profile that you want to use to connect to Intel AMT
computers with Real-Time System Manager, and then click the Edit symbol.
4
In the Define Group Settings dialog box, expand the AMT section.
5
Check Secure mode.
6
In the Trusted CA certificate location box, click Browse and browse to the
CA certificate that you exported for TLS.
See
“Exporting the CA Root Certificate for the Altiris Real-Time System
Manager software”
on page 97.
7
In the Notification Server certificate location box, click Browse and browse
to the mutual authentication certificate file that you just converted (.pem
file).
8
Under the Notification Server certificate location box, click the Add symbol.
9
In the Add Credential dialog box, in the Credential type drop-down, click
AMT NS Cert. File Credential.
107
Configuring TLS
Configuring TLS with mutual authentication
