Configuring Intel Amt Computers To Use Tls Mutual Authentication - Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - IMPLEMENTATION GUIDE V1.0 Implementation Manual

108 Configuring TLS
Configuring TLS with mutual authentication

Configuring Intel AMT computers to use TLS mutual authentication

10 Type a name for the credentials.
For example, type
11 Type and confirm the PEM pass phrase.
Use the same pass phrase that you typed when you created the .pem mutual
certificate.
12 Click OK.
13
From the Select existing credentials drop-down list, click or browse to the
credentials you just added. In this example, click NS Cert. Pass Phrase.
14
Under Trusted domain suffixes , click Add and type the domain suffixes of
your Intel AMT computers that you want to manage.
For example, type
For more information, view topics about using connection profiles in the
Symantec Management Platform Help.
15
Click OK to save the connection profile.
Now you must enable TLS mutual authentication in the configuration profile, and
then reconfigure the Intel AMT computers that use this profile.
After reconfiguration, the Intel AMT computers are ready to be managed out of
band with Altiris products.
See "Altiris products that can manage computers out of band"
See "Configuring TLS with mutual authentication"
To enable TLS mutual authentication in the configuration profile
1
In the Symantec Management Console, on the Settings menu, click All
Settings.
2
In the left pane, click Remote Management > Out of Band Management >
Configuration Service Settings > Configuration Profiles.
3 Open the profile that you want to modify.
4 On the TLS tab, click Use TLS.
5 Click Local Interface: TLS Mutual Authentication and Network Interface:
TLS Mutual Authentication.
6 Click the Browse for Certificate Generation Properties symbol.
7 In the Select Certificate Generation Properties dialog box, click the Add
symbol.
NS Cert. Pass Phrase
west.yourenterprise.com
on page 15.
on page 100.