Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 100 / 192

Configuring TLS with mutual authentication
TLS with mutual authentication adds more security to communications with Intel
AMT devices. Mutual authentication, also known as two-way authentication, is a
process whereby two parties, typically a client and a server, authenticate each
other in such a way that both parties are assured of the identity of the other. In
mutual authentication, the server requests a certificate from the client, and the
client requests a certificate from the server.
Table 7-2
Process for configuring TLS with mutual authentication
Description Action Step
To use this feature, you must first
complete all of the steps that are
required for TLS.
See “Configuring TLS” on page 96.
Meet the requirements for TLS
with mutual authentication. Step 1
You must issue and install an Intel AMT
client certificate that will be used to
authenticate to the client Intel AMT
computers.
See “Creating and installing a client
certificate using an Enterprise CA”
on page 100.
Install a client certificate. Step 2
You must modify the Intel AMT
configuration profile and reconfigure
Intel AMT computers.
See “Configuring Intel AMT computers
to use TLS mutual authentication”
on page 108.
Configure Intel AMT computers
to use TLS with mutual
authentication. Step 3
Creating and installing a client certificate using an Enterprise CA
You must create an Intel AMT client certificate for TLS with mutual authentication
and install the certificate in the certificate store of the Intel SCS user.
See “Configuring TLS with mutual authentication” on page 100.
Configuring TLS
Configuring TLS with mutual authentication
100