Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 96 / 192

When your Intel AMT computers are configured to use TLS with
mutual authentication, the server requests a certificate from the
client, and the client requests a certificate from the server.
See “Configuring TLS with mutual authentication” on page 100.
TLS with mutual
authentication
Configuring TLS
When you set up and configure an Intel AMT computer with TLS, Intel SCS accesses
the trusted certification authority (CA), enrolls for certificate on behalf of each
Intel AMT device, and then installs the certificate into the Intel AMT device.
Table 7-1
Process for configuring TLS
Description Action Step
Specific operating system and
infrastructure requirements must be
met.
See “About environment requirements”
on page 32.
Meet the requirements for TLS. Step 1
CA issues certificates to Intel AMT
devices.
See “Installing and configuring CA”
on page 36.
Install Microsoft certification
authority (CA), if it is not already
installed. Step 2
You need this certificate if you want to
use the SOL/IDE-R functionality of Intel
AMT.
See “Exporting the CA Root Certificate
for the Altiris Real-Time System
Manager software”
on page 97.
(Optional) Export the CA root
certificate. Step 4
Altiris solutions use this connection
profile to connect to the Intel AMT
devices that are configured in secure
mode.
See “Configuring the connection profile
to use TLS” on page 97.
Configure connection profiles to
use the secure mode. Step 5
After this step, the computers can be
managed in secure mode only.
See “Configuring Intel AMT computers
to use TLS” on page 98.
Configure Intel AMT computers
to use TLS. Step 6
Configuring TLS
Configuring TLS
96