Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 127 / 192

Table 10-2
Options on the Add Certificate Generation Properties dialog box
(continued)
Description Option
When working with an Enterprise CA, type the name of the Certificate
Template to be used. You can click ... and select one from the list of
templates that are known to Notification Server .
A template allows customization of the content of the certificates that
the CA issues. The name must be the LDAP name that is stored in Active
Directory. When the template is displayed using the CA management
tools, it is the Template Name and not the Template Display Name. The
default template for TLS is WebServer. For TLS Mutual Authentication,
select the template that you created for mutual. Example: AMTMutual.
See “Configuring TLS with mutual authentication” on page 100.
Template
Select Certificate Template dialog box
This dialog box lets you select the certificate template that you want Intel SCS to
use when generating certificates for the functionality that you want to configure.
Auxiliary profiles: Management Presence Servers
page
Intel AMT 4.0 and later support CIRA (client-initiated remote access). CIRA allows
an Intel AMT computer that is located outside an enterprise to connect to
management consoles inside the enterprise. The connection is accomplished
through a Management Presence Server (MPS) that is located in the DMZ of the
enterprise. The MPS appears as a proxy server to management console
applications. The Intel AMT device establishes a Mutual Authentication TLS
tunnel with the MPS. Multiple consoles can interact with the Intel AMT device
through this tunnel.
Click the Add symbol to add an MPS.
Management Presence Servers: Add Management Presence Server
dialog box
A CIRA policy contains the parameters that determine the conditions for
establishing an MPS connection, as well as the connection parameters to either
one or two MPSs.
127 About Out of Band Management Component pages
Auxiliary profiles: Management Presence Servers page