Product guide

Configuring Intel AMT systems

You can configure an Intel

AMT system using host-based configuration or remote configuration.

• Host-based configuration places the Intel

AMT system in Client Control mode by default. It is the

simplest configuration method. McAfee recommends this configuration method. This mode limits

some of Intel

AMT functionality.

• Remote configuration places the Intel

AMT system in Admin Control mode by default. In this

mode, there are no limitations to Intel

AMT functionality. Use this method when host-based

configuration is not sufficient for your business needs such as when your Intel

AMT systems are

managed remotely.

Contents

Synchronize with Windows Active Directory

Set Intel AMT configuration preferences

Perform host-based configuration

Perform remote configuration

Test your connection to an Intel AMT system

Unconfigure Intel AMT systems through McAfee ePO

Synchronize with Windows Active Directory

ePO Deep Command acquires users through the Windows Active Directory (AD). You must have a

registered LDAP server to use Kerberos authentication.

Tasks

• Register Windows Active Directory server on page 43

It is necessary to register Windows Active Directory with McAfee ePO to use Kerberos

authentication.

• Schedule LDAP synchronization on page 44

Create a task to synchronize McAfee ePO with the Active Directory.

It is necessary to register Windows Active Directory with McAfee ePO to use Kerberos authentication.

Task

For option definitions, click ? in the interface.

In the McAfee ePO console, click Menu | Configuration | Registered Servers, then click New Server to open

the Registered Server Builder wizard.

On the Description page, select LDAP Server, specify a unique name and any details, then click Next.

McAfee ePO Deep Command 2.1.0 Product Guide