Initializing Intel Amt Computers Using The Remote Configuration Feature - Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - IMPLEMENTATION GUIDE V1.0 Implementation Manual

Initializing Intel AMT computers using the Remote Configuration
feature
If you want to configure unmanaged computers, you can check Use DNS IP
resolution to find FQDN when assigning profiles on the Resource
Synchronization page.
In this case, Out of Band Management Component performs a DNS lookup and
assigns the Intel AMT device a DNS name, rather than the FQDN that is stored
in the database.
To use this option you must have a properly configured network infrastructure
where dynamic IP addresses are properly resolved to DNS names. Otherwise,
an incorrect FQDN can be assigned to the Intel AMT device and the device will
not be accessible.
See "Configuring Intel AMT computers for out-of-band management"
To configure automatic profile assignment
1 In the Symantec Management Console, on the Settings menu, click All
Settings.
2
In the left pane, click Remote Management > Out of Band Management >
Intel AMT Systems > Resource Synchronization.
3 Under Profile assignment settings, add a profile to assign to all Intel AMT
computers that request configuration.
You can add more than one profile, for example, if you want to assign different
profiles to computers from different domains.
4 If you want to assign an FQDN to an Intel AMT computer that does not have
the Altiris Agent installed and whose FQDN is not known to Notification
Server , check Use DNS IP resolution to find FQDN when assigning profiles.
5
Turn on the policy and click Save changes.
(Intel AMT 3.0 and later)
The zero-touch Remote Configuration feature lets you initialize Intel AMT 3.0
and later computers without a need to visit the computers' location and manually
install the PID-PPS pair. Preparing the infrastructure for the Remote Configuration
requires you to perform some advanced server-side configuration and purchase
a certificate. However, when all set, initializing thousands of Intel AMT computers
becomes an easy and automated task.
If you cannot purchase a remote configuration certificate, or if you have computers
with Intel AMT versions that do not support Remote Configuration, you must
initialize Intel AMT computers manually.
Configuring Intel AMT computers for out-of-band management
Configuring Intel AMT computers for out-of-band management
65
on page 61.