Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 137 / 192

Edit CRL: Add CRL Entry dialog box
The Certificate Revocation List (CRL) is a list of entries which indicate which
certificates have been revoked. The CRL contains certification authority URLs
and the serial numbers of revoked certificates. CRL is an optional feature of TLS
Mutual Authentication.
Table 10-9
Options on the Add CRL Entry dialog box
Description Option
Click to select the location of the CRL you
want to use. CRL Uri
Click the Browse symbol to select from the
list of available serial numbers. Click the Add
symbol to add a serial number manually. Serial Numbers
Add CRL Entry: Select CRL Uri dialog box
This dialog box lets you select the source of the Certificate Revocation List (CRL).
Edit CRL: Import CRL dialog
This dialog box lets you import the Certificate Revocation List (CRL) from a file.
Setup and configuration profile: ACL tab
The Intel AMT access control list (ACL) manages who has access to which
capabilities within Intel AMT. An ACL entry has a user ID and a list of realms to
which a user has access. This access is required to use the functionality that is
associated with a realm. You can use two kinds of ACL entries: Kerberos and Digest.
The main difference between them is that Kerberos entries have an Active
Directory SID to identify a user or group of users. Digest entries have a user name
and password for user identification. When Microsoft Active Directory is used,
user identities are imported from Active Directory; otherwise, user identities are
added manually.
Kerberos users are not available if AD integration is disabled.
See “Integrating Intel SCS with Active Directory” on page 55.
ACL: Add ACL Entry dialog box
This dialog box lets you add a user to the Intel AMT access control list (ACL).
137 About Out of Band Management Component pages
Configuration Profiles page