The certificate installs into the Certificates - Current User > Personal >
Certificates store. To view this certificate, add the Certificates - Current
User snap-in to the Microsoft Management Console.
■
Enable the Remote Configuration feature in Out of Band Management
Component.
See
“Enabling the Remote Configuration feature in Out of Band
Management Component”
on page 75.
Acquiring and installing a certificate from an external certificate vendor
(Commercial provided certificates only)
These steps are only required if you want to purchase a Remote Configuration
certificate.
See
“About the Intel AMT Remote Configuration feature”
on page 67.
See
“Configuring your OOB site server computer (by default, the Notification
Server computer) for Remote Configuration”
on page 69.
To acquire a certificate
1
Contact one of the vendors whose root certificate hashes are built into the
Intel AMT firmware. A list of the hashes should be provided by the platform
vendor. You can also see the hashes by logging into the MEBx of an Intel AMT
computer.
2
Go to the certificate vendor’s Web site, submit the certificate request (CSR)
that you prepared and purchase an SSL certificate.
See
“Preparing a certificate request for Remote Configuration”
on page 72.
For example, the following link to Verisign® site
http://www.verisign.com/ssl/intel-vpro-technology/index.html
describes
how to purchase an appropriate certificate. The site documents the steps that
are required to request, enroll, install, and move an SSL certificate.
3
Save the acquired certificate on the OOB site server computer (by default,
the Notification Server computer) into a text file with a .cer extension.
To install the certificate into the current user certificate store
1
Logon to the OOB site server computer (by default, the Notification Server
computer) using the Application Identity Account.
For more information about the Notification Server’s Application Identity
account, see the Symantec Management Platform Help.
2
Double-click the .cer file to open the certificate.
3
Click Install Certificate and follow the wizard.
Configuring Intel AMT computers for out-of-band management
Configuring Intel AMT computers for out-of-band management
74
