User manual SYMANTEC OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 MR1

[. . . ] AltirisTM Out of Band Management Component from Symantec User Guide Version 7. 0 SP3 MR1 AltirisTM Out of Band Management Component from Symantec User Guide The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Documentation version 7. 0 SP3 MR1 Legal Notice Copyright © 2010 Symantec Corporation. Symantec, the Symantec Logo, Altiris, and any Altiris or Symantec trademarks used in the product are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U. S. Other names may be trademarks of their respective owners. [. . . ] Wi-Fi: If the Intel AMT computer is in a home domain and no wired connection is available, and the profile does not include Wi-Fi parameters, and the host has connected using Wi-Fi, the Intel AMT computer will use the host's Wi-Fi settings as long as the access point is in one of these domains. FQDN validation Check to validate the Intel AMT devices's FQDN when you modify the configuration properties for an Intel AMT device. Intel SCS checks that the device's FQDN matches one of the domains in the domain list of the profile that is used for setup and configuration. Check to allow configuration (using this profile) of an Intel AMT computer that is located in a sub-domain of the domain that you entered in the Domain Name box. For example, if the domain name is mydomain. com, Intel AMT computers in subdomain. mydomain. com can also be configured. Allow sub-domain Setup and configuration profile: Remote Access tab Intel AMT 4. 0 and later support client-initiated remote access. This feature allows a platform containing Intel AMT located outside an enterprise to connect to management consoles inside the enterprise. The connection is accomplished through a Management Presence Server (MPS) located in the DMZ of the enterprise. The MPS appears as a proxy server to management console applications. The Intel AMT device establishes a Mutual Authentication TLS tunnel with the MPS. Multiple consoles can then interact with the Intel AMT device through the tunnel. 40 About Out of Band Management Component pages DNS configuration page For remote access to work, you must configure the Intel AMT platform when the platform is inside the enterprise. You must configure the platform with the information needed to connect with the MPS. The Remote Access tab is used to enter the necessary parameters. A remote access policy contains the parameters that determine the conditions for establishing an MPS connection. The policy also contains the connection parameters to either one or two MPSs. The MPS connection parameters are defined separately. DNS configuration page The computer with Intel SCS installed (the OOB site server computer) must be registered in DNS as ProvisionServer. Intel AMT devices send their Hello packets to this host name. This page lets you test if the DNS is configured correctly. Note: If this test fails, you cannot use the Remote Configuration feature. For more information, see the Out of Band Management Component Implementation Guide. Also, you cannot set up and configure the Intel AMT capable computers that were initialized by an OEM or with a USB key. Only computers with Intel AMT device initialized through MEBx can be configured. For more information, see the Out of Band Management Component Implementation Guide. Table 2-14 Options on the DNS configuration page Option Description Test Click to see if DNS is configured correctly. [. . . ] A set of rules that control the execution of automated actions. Policies can be scheduled or based on incoming data that triggers an immediate action. Policies determine when an action should start and who or what should be notified of the results. The overall power consumption of the system. [. . . ]