Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 134 / 192

Table 10-7
Options on the Network tab (continued)
Description Option
Check to enable manageability traffic even if the host cannot
complete 802.1x authentication to the network. Enable 802.1x for AMT
even if host is not
authorized for 802.1x
Check to enable Endpoint Access Control.
Choose the certification authority and the template to use for
issuing a client certificate for Endpoint Access Control posture
signing.
Enable EAC
If the 802.1x profile's protocol is one of the EAP-FAST
protocols, you can use NAC authentication along with the
RADIUS server to authenticate the AMT device. If the 802.1x
profile’s protocol is one of the PEAP definitions, you can
specify NAP or NACNAP hybrid authentication. Vendor
Check to enable the KVM capability.
Intel AMT Release 6.0 introduces support for the Keyboard,
Video and Mouse (KVM) capability. KVM enables remote
control of an Intel AMT system using a remote keyboard and
mouse and viewing the managed system’s screen output at a
remote monitor.
Enable KVM
Check if you want to define that the user of the Intel AMT
system must consent to KVM connections.
A pop-up window appears on the Intel AMT system when a
KVM connection request is processed. The window contains
a code number that the user must provide (by telephone) to
the person trying to connect to his computer.
User consent required
before beginning KVM
session
Determines the maximum time (in minutes) allocated for the
user consent process. If the user consent process is not
completed in this time, a new KVM connection request must
be sent. Timeout for user consent
Check if you want to use a VLAN. Use VLAN
If a VLAN is used, set the VLAN Tag, which is used to
distinguish between different VLANs.
Caution: Be careful when configuring the VLAN value. If the
value is incorrect, the Intel AMT devices are not accessible.
VLAN tag
About Out of Band Management Component pages
Configuration Profiles page
134