Setup And Configuration Profile: Acl Tab - Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - IMPLEMENTATION GUIDE V1.0 Implementation Manual

Setup and configuration profile: ACL tab

Edit CRL: Add CRL Entry dialog box
The Certificate Revocation List (CRL) is a list of entries which indicate which
certificates have been revoked. The CRL contains certification authority URLs
and the serial numbers of revoked certificates. CRL is an optional feature of TLS
Mutual Authentication.
Options on the Add CRL Entry dialog box
Table 10-9
Option
CRL Uri
Serial Numbers
Add CRL Entry: Select CRL Uri dialog box
This dialog box lets you select the source of the Certificate Revocation List (CRL).
Edit CRL: Import CRL dialog
This dialog box lets you import the Certificate Revocation List (CRL) from a file.
The Intel AMT access control list (ACL) manages who has access to which
capabilities within Intel AMT. An ACL entry has a user ID and a list of realms to
which a user has access. This access is required to use the functionality that is
associated with a realm. You can use two kinds of ACL entries: Kerberos and Digest.
The main difference between them is that Kerberos entries have an Active
Directory SID to identify a user or group of users. Digest entries have a user name
and password for user identification. When Microsoft Active Directory is used,
user identities are imported from Active Directory; otherwise, user identities are
added manually.
Kerberos users are not available if AD integration is disabled.
See "Integrating Intel SCS with Active Directory"
ACL: Add ACL Entry dialog box
This dialog box lets you add a user to the Intel AMT access control list (ACL).
About Out of Band Management Component pages
Configuration Profiles page
Description
Click to select the location of the CRL you
want to use.
Click the Browse symbol to select from the
list of available serial numbers. Click the Add
symbol to add a serial number manually.
on page 55.
137