Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0 Manual page 23

Options on the Add 802.1x Profile dialog box
Table 2-1
Option
Profile name
Protocol
Client certificate
Roaming identity
Trusted root CA for
certificate
Server certificate
subject
Certificate subject type
About Out of Band Management Component pages
Description
Type a name for the new 802.1x profile.
Select from one of the available options.
The client authentication options require defining a source for
a client certificate for authenticating an Intel AMT device to a
Radius server. Type a path to a certification authority (CA) and
select a template that is defined for creating the appropriate
client certificate. Defining a template requires an Enterprise
certification authority, which requires presence of Active
Directory.
For more information, see the Out of Band Management
Component Implementation Guide.
Note:
Only three server and client certificates can be associated
with a single profile. These include the Server certificate that is
required for TLS and any client certificates that are required for
802.1x profiles or for NAC posture signing. In a normal
installation, a single client certificate would be purchased for
all applications in the facility. If a profile requires more than
three certificates, setup of an Intel AMT device based on this
profile fails.
Check to enable roaming.
The user will have an identity of Anonymous.
Select the root certificate from the certification authority (CA)
that was the issuer of the server certificate that is installed on
the Radius server. Intel SCS installs a root certificate from that
CA in the Intel AMT devices that are configured with this profile.
Type the subject name in the certificate that is installed in the
Radius server.
For Radius server domain verification, choose one of the
following:
Fully Qualified Domain Name - click if you entered the
Radius server's FQDN into the Server certificate subject box.
Radius Server Domain Suffix - click if you entered the Radius
server's domain suffix in the Server certificate subject box.
If you do not want to use the Radius server domain name
verification, click Do not verify Radius Server certificate subject
name.
Auxiliary profiles: 802.1x Profiles page
23