Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - IMPLEMENTATION GUIDE V1.0 Implementation Manual page 37

performs the installation must be a member of the domain and have sufficient
administration privileges. For example, the user must be a member of the Domain
Admins group.
Make sure the CA that you installed is configured to generate certificates
automatically (this is the default setting) so that Intel SCS can request a certificate
each time it performs a setup of an Intel AMT device. Otherwise, you have to
intervene each time a device is set up.
Warning: To enable Web enrollment for certificates, install IIS before installing
the CA.
See "About installing Microsoft IIS"
To install the CA
1 On the computer where you want to install the CA, click the Windows Start
button, and then click Control Panel > Add or Remove Programs >
Add/Remove Windows Components.
2
On the Windows Components Wizard page, check Certificate Services.
A warning is displayed indicating that the computer name or the domain
membership of the computer cannot be changed while it acts as a certificate
server. Click Yes.
3 Click Details. Make sure that both Certificate Services CA and Certificate
Services Web Enrollment Support are checked, and then click OK.
4 Click Next.
5
On the CA Type page, select either Enterprise root CA or Stand-alone root
CA and click Next.
6 On the CA Identifying Information page, type the common name for this
CA.
This is the name by which the CA will be known.
7
Type the distinguished name suffix, if it is not already there.
This is the domain suffix of the host. It is generated automatically in an Active
Directory environment.
8 Click Next.
9
Click Next.
10 If there is a message that requests to stop the IIS, click Yes.
The installation runs to completion.
Planning for Out of Band Management Component installation
on page 36.
Installing and configuring CA
37