Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 108 / 192

10 Type a name for the credentials.
For example, type
NS Cert. Pass Phrase
11 Type and confirm the PEM pass phrase.
Use the same pass phrase that you typed when you created the .pem mutual
certificate.
12 Click OK.
13
From the Select existing credentials drop-down list, click or browse to the
credentials you just added. In this example, click NS Cert. Pass Phrase.
14 Under Trusted domain suffixes , click Add and type the domain suffixes of
your Intel AMT computers that you want to manage.
For example, type
west.yourenterprise.com
For more information, view topics about using connection profiles in the
Symantec Management Platform Help.
15 Click OK to save the connection profile.
Configuring Intel AMT computers to use TLS mutual authentication
Now you must enable TLS mutual authentication in the configuration profile, and
then reconfigure the Intel AMT computers that use this profile.
After reconfiguration, the Intel AMT computers are ready to be managed out of
band with Altiris products.
See “Altiris products that can manage computers out of band” on page 15.
See “Configuring TLS with mutual authentication” on page 100.
To enable TLS mutual authentication in the configuration profile
1 In the Symantec Management Console, on the Settings menu, click All
Settings.
2
In the left pane, click Remote Management > Out of Band Management >
Configuration Service Settings > Configuration Profiles.
3 Open the profile that you want to modify.
4 On the TLS tab, click Use TLS.
5 Click Local Interface: TLS Mutual Authentication and Network Interface:
TLS Mutual Authentication.
6 Click the Browse for Certificate Generation Properties symbol.
7 In the Select Certificate Generation Properties dialog box, click the Add
symbol.
Configuring TLS
Configuring TLS with mutual authentication
108