Issuing the new certificate template for Remote Configuration
You must issue the new template that you prepared.
See
“Configuring your OOB site server computer (by default, the Notification
Server computer) for Remote Configuration”
on page 69.
To issue the new template
1
On the computer with the certification authority (CA) installed, click Start >
Control Panel > Administrative Tools > Certification Authority.
2
In the left pane, click your CA.
3
Right-click Certificate Templates, and then click New > Certificate Template
to Issue.
4
In the Enable Certificate Templates dialog box, click the template that you
prepared earlier (in this example, click AMT Remote Configuration), and
then click OK.
Preparing a certificate request for Remote Configuration
You must prepare a certificate request that you will use to create your own
certificate or submit to one of the commercial SSL certificate providers, whose
root certification authority hash is already in the firmware of the Intel AMT device.
You must do this for each OOB site server in your environment.
See
“About OOB site servers”
on page 118.
See
“Configuring your OOB site server computer (by default, the Notification
Server computer) for Remote Configuration”
on page 69.
To prepare a certificate request
1
Log on to the OOB site server computer (by default, the Notification Server
computer) using the Application Identity Account.
For more information about the Notification Server’s Application Identity
account, see the Symantec Management Platform Help.
2
From the OOB site server computer (by default, the Notification Server
computer), open the Certificate Services Web page of your certification
authority (CA) (http://<ca_server_name>/certsrv/) in the Internet Explorer.
3
Click Request a certificate.
4
Click advanced certificate request.
5
Click Create and submit a request to this CA.
Configuring Intel AMT computers for out-of-band management
Configuring Intel AMT computers for out-of-band management
72
