It is possible that Intel AMT computers in your environment are located in multiple
subnets, domains, or geographic locations, and cannot contact the only OOB site
server directly (for example, due to network issues). In this case, consider installing
an OOB site server at each of those locations.
For the OOB site servers hierarchy to work properly, the following conditions
must be met:
■
The OOB site server computer must meet the minimum software requirements.
See
“Prerequisites for OOB site server installation”
on page 118.
■
The OOB site server computer can access the same SQL Server that is used by
all OOB site servers.
See
“About configuring SQL server”
on page 34.
■
DNS for this location is configured to resolve the ProvisionServer host name
to the OOB site server computer that is installed in this location.
See
“About configuring DNS”
on page 33.
See
“About OOB site servers”
on page 118.
Configuring a firewall to allow Intel SCS and SQL
server connections
You must configure a firewall on the OOB site server computer (by default, the
Notification Server computer) to allow incoming traffic to Intel SCS.
On the computer with Microsoft SQL Server installed, you must configure the
firewall to allow incoming traffic to the SQL server.
Configuring firewall software on the client Intel AMT computers is not necessary
because Intel AMT management is performed at the hardware level.
See
“About ports used by Intel AMT”
on page 40.
To configure a firewall to allow Intel SCS connections
1
Open the Control Panel on the computer with Intel SCS installed (this is the
OOB site server computer, by default, the Notification Server computer ), and
then click Windows Firewall.
2
In the Windows Firewall dialog box, on the Exceptions tab, click Add
Program.
3
Click Browse, navigate to the instance of Intel SCS that you want to access
through the firewall, and then click Open.
By default, Intel SCS is located at
C:\Program
Files\Intel\AMTConfServer\Windows Service\AMTConfigWinService.exe
.
39
Planning for Out of Band Management Component installation
Configuring a firewall to allow Intel SCS and SQL server connections