Novell ZENWORKS LINUX MANAGEMENT 7.2 IR2 - ADMINISTRATION GUIDE 09-25-2008, Руководство администратора

Страница: 330 / 674

330 Novell ZENworks 7.2 Linux Management Administration Guide
n
ov
do
cx (e
n)
11
Ju
ly 20
08
Understanding AMT Provisioning
For security purposes, AMT devices generally ship with all AMT features disabled. In this
configuration, AMT devices act like normal computers, but none of the AMT features are available.
To enable the AMT features, each device must go through a process that Intel refers to as
“provisioning,” which sets up the device’s AMT resources for access.
Š “The Provisioning Modes” on page 330
Š
“The Provisioning Process” on page 330
The Provisioning Modes
An AMT device may be provisioned into one of two modes: enterprise or small business. Both
modes offer the same off-line and remote management capabilities, but in enterprise mode AMT
devices use local Certificate Authority credentials to grant remote access, and may require HTTPS
protocol for communication rather than just HTTP. In small business mode, remote access is granted
through standard HTTP authentication services.
While ZENworks Linux Management works equally well with devices provisioned in either
enterprise or small business mode, only the small business mode is required. Therefore, ZENworks
Linux Management does not provide a mechanism to provision AMT devices in enterprise mode.
If you use another AMT-enabled application that does require provisioning in enterprise mode, you
should use the provisioning utilities of that application. Make sure you provision each AMT device
with at least one “enterprise name.”
The Provisioning Process
The provisioning process for AMT devices allows you to specify many AMT-related configuration
settings. Examples include users, passwords, enterprise names, and allocation of NVRAM space to
specific AMT-enabled applications.
To use the AMT features in ZENworks Linux Management, all that is necessary is each AMT device
be provisioned with at least one valid enterprise name, which is used to access the NVRAM where
Linux Management stores the ZENworks identity information.
Intel suggests that the enterprise name be chosen to indicate the device’s general location. For
example, all the devices in the home office may be given an enterprise name of “Company_HQ,”
and all devices in field offices may be given enterprise names reflecting their geographical locations.
While it is not required, it is assumed that large numbers of devices will have the same Enterprise
name. Each AMT device itself may have up to four different enterprise names.
ZENworks Linux Management provides a utility (
smb-provisioning.exe
) to help provision
AMT-devices in small business mode with enterprise names. This utility can be found in the
/opt/
novell/zenworks/zdm/winutils
directory on your imaging server. It requires .NET
framework.
For the procedures in providing Intel AMT enterprise names to ZENworks Linux Management, see
Section 29.4.6, “Configuring Intel Active Management Technology (AMT),” on page 386 .
Accessing AMT Resources
For more information, see “Downloading and Installing the iAMT Redirection Drivers” on
page 386 .