Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 69 / 192

Prerequisites for using the Remote Configuration feature
Before you can use the Remote Configuration feature, the following requirements
must be met:
■
Active Directory is present in your environment.
■
Enterprise certification authority installed in your environment.
See “Installing and configuring CA” on page 36.
■
The Intel AMT device is configured to receive its IP address from a DHCP
server. The DHCP server supports option 15 and will return the local domain
suffix.
See “About configuring DHCP” on page 34.
■
The Intel AMT device is pre-programmed with at least one active root certificate
hash.
See “About the Intel AMT Remote Configuration feature” on page 67.
■
The OOB site server computer (by default, the Notification Server computer)
is registered with the DNS that is accessible to the Intel AMT device with the
name ProvisionServer. The OOB site server computer is in either the same
domain as the device or a domain with the same suffix.
See “About configuring DNS” on page 33.
See “Initializing Intel AMT computers using the Remote Configuration feature”
on page 65.
Configuring your OOB site server computer (by default, the
Notification Server computer) for Remote Configuration
To configure your OOB site server (by default, the Notification Server computer)
for the Remote Configuration feature support, you must acquire and install the
Remote Configuration certificate. This certificate is used by Intel SCS to
authenticate to the Intel AMT devices.
Table 6-3
Process for configuring your OOB site server computer for Remote
Configuration
Description Action Step
Certificate template defines the format
and content of a certificate.
See “Preparing a certificate template
for Remote Configuration” on page 70.
Prepare a certificate template. Step 1
69 Configuring Intel AMT computers for out-of-band management
Configuring Intel AMT computers for out-of-band management