Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - IMPLEMENTATION GUIDE V1.0 Implementation Manual page 136

136 About Out of Band Management Component pages
Configuration Profiles page
Options on the TLS tab (continued)
Table 10-8
Option Description
Trusted These are the issuers of the client certificates that the Intel AMT
Certificates device recognizes as authentic. These certificates are stored in the
database and then sent to the Intel AMT device during configuration.
Intel AMT can accept up to four trusted root certificates, so no more
than four should be added to a profile.
Click the Add symbol and, in the Select Trusted Root Certificate
dialog box, select the certification authority (CA) that you configured
to issue certificates for TLS with Mutual.
You can also import the trusted root CA certificate from a file.
See
CRL (Optional)
The Certificate Revocation List (CRL) is a list of entries that indicate
which certificates have been revoked. The CRL contains certification
authority URLs and the serial numbers of revoked certificates. This
is an optional feature of TLS Mutual Authentication.
Click the Manage CRL symbol to define a CRL.
FQDN Suffixes The Fully Qualified Domain Name (FQDN) suffixes for mutual
authentication.
The Intel AMT device validates that any client certificates that Intel
SCS or Altiris solutions use have one of the listed suffixes in the
certificate subject.
Type the FQDN suffix of the Notification Server computer: for
example, type yourenterprise.com. If you want to type more than
one suffix, use a comma as a delimiter.
TLS: Edit CRL dialog box
The Certificate Revocation List (CRL) is a list of entries that indicate which
certificates have been revoked. The CRL contains certification authority URLs
and the serial numbers of revoked certificates. CRL is an optional feature of TLS
Mutual Authentication.
This feature requires a certification authority be installed in your environment.
See "Installing and configuring CA"
Add and select the CRL that you want to use.
"About TLS" on page 95.
on page 36.