Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 146 / 192

installed both in the Intel AMT device and in the Intel SCS database. You can use
the Security Keys page to manage the preshared keys and associated parameters.
Each key has four elements: the key itself (PPS), an identifier that is sent in the
clear by the Intel AMT device in the Hello message (called a PID), an initial MEBx
password, and a replacement MEBx password.
Sets of these parameters can be generated, exported to a USB key, and then
installed in new Intel AMT devices.
See “Initializing computers manually using a USB key” on page 77.
Alternatively, an OEM may ship initialized platforms with PID-PPS pairs and a
default password already installed. In this case, you must import the key file from
the OEM into Out of Band Management Component.
See “Initializing OEM-prepared computers manually” on page 77.
The third option is to generate new PID-PPS pairs, print them out, and type them
into the Intel Management Engine (MEBx) manually.
See “Initializing computers manually through MEBx” on page 80.
If you use the Remote Configuration feature of Intel AMT 3.0, the keys are
generated and installed automatically.
See “Initializing Intel AMT computers using the Remote Configuration feature”
on page 65.
Table 10-17 Options on the Security keys page
Description Option
Click to add a new security key.
The PID is the eight character identification string that is sent in
the clear in the Hello message. The string format is XXXX-XXXX.
The PPS is a 32-character key string that is the secret shared
between the Intel AMT device and the SCS service. The string format
is XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX.
Type the factory default Intel Management Engine (MEBx) password.
The default value is "admin", unless you specifically asked the OEM
to preconfigure Intel AMT computers with a different password.
Type a new password. This becomes the new Intel Management
Engine (MEBx) password after you initialize the Intel AMT device
with this PID-PPS pair.
Note:
You must type a strong password. Example: P@ssw0rd
See “About passwords used with Intel AMT” on page 177.
Add new
About Out of Band Management Component pages
Security keys page
146