Product guide

f
In AMT User accounts and rights, perform one of these steps:
For Digest account, click New Digest User, type user name, type password, retype password (or
select Show Password), then select the required access right for the use:
Administrator — Provides PT Administration rights, which allows the user to access all Intel
®
AMT features. A PT Administrator manages security control data such as Access Control
Lists, Kerberos parameters, Transport Layer Security, Configuration parameters,
power-saving options, and power packages. Also this user has access to all realms.
If a PT Administrator wants to run configurator to perform host-based configuration, the
Access Type must be selected as Local or Both.
Help Desk — Provides these access rights:
Hardware Asset — To retrieve information about the hardware inventory of the Intel
®
AMT
system.
Storage — To configure, and write to and read from non-volatile user storage.
General Info — To retrieve general setting and status information. With this interface, it is
possible to give a user permission to read parameters related to other interfaces
without giving permission to change the parameters.
Endpoint Access Control — To retrieve settings associated with NAC/NAP posture.
Event Log Reader — To allow definition of a user with permissions only to read the Intel
®
AMT system log.
User Access Control — To group ACL management commands into a separate realm to
enable users to manage their own passwords without requiring administrator rights.
Remote Power Control — Provides these access rights:
Redirection — To enable and disable the redirection capability and retrieves the
redirection log.
Remote Control — To enable powering up a system or shutting it down remotely. Used
with the Redirection capability to boot remotely.
General Info — To retrieve general setting and status information. With this interface, it is
possible to give a user permission to read parameters related to other interfaces
without giving permission to change the parameters.
(Optional) To modify a saved digest account, select it, then click Edit.
For Kerberos account,
1
Select New Kerberos User or New Kerberos Group, as needed, select the required user or group,
then click OK.
2
Select the user or group, then select the required access right for the user or group (AMT
Administrator, AMT Help Desk, AMT Remote Power Control).
4
(Optional) In the Advanced tab, complete these Remote configuration options:
Remote management — Select whether to enable the web interface for Intel
®
AMT management.
Intel Fast Call for Help — Select when a user can initiate a call for help:
OS initiated — from the operating system.
BIOS initiated — from the BIOS.
Configuring Intel AMT systems
Set Intel AMT configuration preferences
4
McAfee ePO Deep Command 2.1.0 Product Guide
47