Configuring Intel Amt Computers To Use Tls - Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - IMPLEMENTATION GUIDE V1.0 Implementation Manual

98 Configuring TLS
Configuring TLS

Configuring Intel AMT computers to use TLS

If you want to use the SOL/IDE-R functionality, you must configure the connection
profile with the trusted root CA certificate that you exported.
See "Exporting the CA Root Certificate for the Altiris Real-Time System Manager
software" on page 97.
This certificate is used to validate the authenticity of the managed AMT computer
and the Notification Server computer during SOL and IDE-R sessions.
For more information on connection profiles, see the Symantec Management
Platform Help.
See "Configuring TLS"
To configure the connection profile to use TLS
1 In the Symantec Management Console, on the Settings menu, click All
Settings.
2
In the left pane, click Monitoring and Alerting > Protocol Management >
Connection Profiles > Manage Connection Profiles.
3 Click the connection profile that you use to connect to Intel AMT computers
with Real-Time System Manager, and then click the Edit symbol.
4
In the Define Group Settings dialog box, expand the AMT section.
5 Check Secure mode.
6 If you want to use the SOL/IDE-R functionality, in the Trusted CA certificate
location box, click Browse and browse to the CA certificate that you exported
earlier.
See "Exporting the CA Root Certificate for the Altiris Real-Time System
Manager software"
Now you can modify one of the existing configuration profiles to use TLS, and
then reconfigure your Intel AMT computers.
After the Intel AMT computers are reconfigured, they are ready to be managed
out of band in secure mode.
See "Altiris products that can manage computers out of band"
See "Configuring TLS"
on page 96.
on page 97.
on page 96.
on page 15.