Product guide
f
In AMT User accounts and rights, perform one of these steps:
• For Digest account, click New Digest User, type user name, type password, retype password (or
select Show Password), then select the required access right for the use:
• Administrator — Provides PT Administration rights, which allows the user to access all Intel
®
AMT features. A PT Administrator manages security control data such as Access Control
Lists, Kerberos parameters, Transport Layer Security, Configuration parameters,
power-saving options, and power packages. Also this user has access to all realms.
If a PT Administrator wants to run configurator to perform host-based configuration, the
Access Type must be selected as Local or Both.
• Help Desk — Provides these access rights:
• Hardware Asset — To retrieve information about the hardware inventory of the Intel
®
AMT
system.
• Storage — To configure, and write to and read from non-volatile user storage.
• General Info — To retrieve general setting and status information. With this interface, it is
possible to give a user permission to read parameters related to other interfaces
without giving permission to change the parameters.
• Endpoint Access Control — To retrieve settings associated with NAC/NAP posture.
• Event Log Reader — To allow definition of a user with permissions only to read the Intel
®
AMT system log.
• User Access Control — To group ACL management commands into a separate realm to
enable users to manage their own passwords without requiring administrator rights.
• Remote Power Control — Provides these access rights:
• Redirection — To enable and disable the redirection capability and retrieves the
redirection log.
• Remote Control — To enable powering up a system or shutting it down remotely. Used
with the Redirection capability to boot remotely.
• General Info — To retrieve general setting and status information. With this interface, it is
possible to give a user permission to read parameters related to other interfaces
without giving permission to change the parameters.
• (Optional) To modify a saved digest account, select it, then click Edit.
• For Kerberos account,
1
Select New Kerberos User or New Kerberos Group, as needed, select the required user or group,
then click OK.
2
Select the user or group, then select the required access right for the user or group (AMT
Administrator, AMT Help Desk, AMT Remote Power Control).
4
(Optional) In the Advanced tab, complete these Remote configuration options:
• Remote management — Select whether to enable the web interface for Intel
®
AMT management.
• Intel Fast Call for Help — Select when a user can initiate a call for help:
• OS initiated — from the operating system.
• BIOS initiated — from the BIOS.
Configuring Intel AMT systems
Set Intel AMT configuration preferences
4
McAfee ePO Deep Command 2.1.0 Product Guide
47