Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 35 / 192

intensive, consider using a two-server configuration—one computer for Notification
Server and one for SQL server.
Table 2-2
SQL server installation guidelines
Two-server
configuration One-server
configuration Factor
5000 2000 Maximum number of computers to
manage
Moderate Moderate Update times for solutions and
Notification Server processes
Many Several Number of solutions that run along
with Out of Band Management
Component
15 5 Number of active console users
About integrating with Microsoft Active Directory
Intel SCS uses Active Directory (AD) for Kerberos authentication using Intel AMT
objects. You must integrate Out of Band Management Component with AD if you
want to add Kerberos users to the Intel AMT Access Control List. Kerberos users
are users in the form of
DOMAIN\username
.
Integration with AD is also required when you want to use 802.1x authentication.
The Intel AMT data that is stored in AD is used in certificate requests for that
Intel AMT computer.
When AD integration is enabled, during setup and configuration of an Intel AMT
device, Intel SCS creates a directory entry that is based on the
Intel-Management-Engine class.
This directory entry contains the following data:
■
An AD object that represents the Intel AMT device.
■
An attribute for connecting the AD computer object to the Intel AMT object.
To integrate Intel SCS with AD, the OOB site server computer (by default, the
Notification Server computer) must be a member of a domain.
See “Integrating Intel SCS with Active Directory” on page 55.
35 Planning for Out of Band Management Component installation
About integrating with Microsoft Active Directory