Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - IMPLEMENTATION GUIDE V1.0 Implementation Manual page 125

Options on the Add 802.1x Profile dialog box
Table 10-1
Option
Profile name
Protocol
Client certificate
Roaming identity
Trusted root CA for
certificate
Server certificate
subject
About Out of Band Management Component pages
Description
Type a name for the new 802.1x profile.
Select from one of the available options.
The client authentication options require defining a source for
a client certificate for authenticating an Intel AMT device to a
Radius server. Type a path to a certification authority (CA) and
select a template that is defined for creating the appropriate
client certificate. Defining a template requires an Enterprise
certification authority, which requires presence of Active
Directory.
See "Installing and configuring CA"
See "About integrating with Microsoft Active Directory"
on page 35.
Note: Only three server and client certificates can be associated
with a single profile. These include the Server certificate that is
required for TLS and any client certificates that are required for
802.1x profiles or for NAC posture signing. In a normal
installation, a single client certificate would be purchased for all
applications in the facility. If a profile requires more than three
certificates, setup of an Intel AMT device based on this profile
fails.
Check to enable roaming.
The user will have an identity of Anonymous.
Select the root certificate from the certification authority (CA)
that was the issuer of the server certificate that is installed on
the Radius server. Intel SCS installs a root certificate from that
CA in the Intel AMT devices that are configured with this profile.
Type the subject name in the certificate that is installed in the
Radius server.
Auxiliary profiles: 802.1x Profiles page
on page 36.
125