4
In the wizard, click Automatically select the certificate store based on the
type of certificate.
The certificate must be installed into the Certificates - Current User >
Personal > Certificates store. To view this certificate, add the Certificates -
Current User snap-in to the Microsoft Management Console.
5
Enable the Remote Configuration feature in Out of Band Management
Component.
See
“Enabling the Remote Configuration feature in Out of Band Management
Component”
on page 75.
Enabling the Remote Configuration feature in Out of Band
Management Component
After you configured your OOB site server computer (by default, the Notification
Server computer) for Remote Configuration, you must enable the Remote
Configuration feature in Out of Band Management Component.
See
“Initializing Intel AMT computers using the Remote Configuration feature”
on page 65.
To enable the Remote Configuration feature
1
In the Symantec Management Console, on the Settings menu, click All
Settings.
2
In the left pane, click Remote Management > Out of Band Management >
Configuration Service Settings > General.
3
In the right pane, check Allow Remote Configuration.
4
Click Save changes.
5
Proceed to the next step.
See
“Starting the Intel AMT Remote Configuration”
on page 75.
Starting the Intel AMT Remote Configuration
Plug in the network cable, power cable, and turn on your Intel AMT 3.0 or later
computer. The Intel AMT device sends its certificate hashes to the OOB site server
computer (by default, the Notification Server computer). Then, Intel SCS
authenticates to the Intel AMT device with a certificate chain that includes a
trusted root certificate matching one of the received hashes (you can view the
certificate's hash on the certificate's Details tab, in the Thumbprint field). After
that, the Intel AMT device checks the hashes and the DNS suffix in the certificate,
and goes through the setup and configuration process.
75
Configuring Intel AMT computers for out-of-band management
Configuring Intel AMT computers for out-of-band management