Security Keys Page - Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0 Manual

44 About Out of Band Management Component pages

Security keys page

Security keys page

Setup and configuration of Intel AMT 2.0 (or later) devices is done using the
TLS-PSK (Pre-Shared Key) protocol. The protocol requires the security keys
installed both in the Intel AMT device and in the Intel SCS database. You can use
the Security Keys page to manage the preshared keys and associated parameters.
Each key has four elements: the key itself (PPS), an identifier that is sent in the
clear by the Intel AMT device in the Hello message (called a PID), an initial MEBx
password, and a replacement MEBx password.
Sets of these parameters can be generated, exported to a USB key, and then
installed in new Intel AMT devices.
For more information, see the Out of Band Management Component Implementation
Guide.
Alternatively, an OEM may ship initialized platforms with PID-PPS pairs and a
default password already installed. In this case, you must import the key file from
the OEM into Out of Band Management Component.
For more information, see the Out of Band Management Component Implementation
Guide.
The third option is to generate new PID-PPS pairs, print them out, and type them
into the Intel Management Engine (MEBx) manually.
For more information, see the Out of Band Management Component Implementation
Guide.
If you use the Remote Configuration feature of Intel AMT 3.0, the keys are
generated and installed automatically.
For more information, see the Out of Band Management Component Implementation
Guide.