Product guide

4
In Credentials for Intel
®
AMT actions, do one of these:
• Use the default ePO_Admin account — Select Use above credentials, then select Show password to
view the default password.
• Update credentials — Select Change credentials, deselect Use above credentials, then type the user
name and password to be used for Intel
®
AMT actions. (Use domain\user name format for Active
Directory accounts)
5
Click Save.
Perform host-based configuration
Create and enforce a host-based configuration policy which uses the host-based configuration profile.
Before you begin
• Intel
®
AMT system must support host-based configuration. Navigate to its system
properties page, from the Products tab select McAfee ePO Deep Command Client, then check the
value for Host Based Configuration.
• Local Manageability Service driver must be present on the Intel
®
AMT system. Value for
Local Manageability Service Present in the Deep Command tab on the System Details page for the
client system, must be Yes.
• If an Intel
®
AMT system is already configured and you want to migrate it from Admin
Control mode to Client Control mode, unconfigure the client first.
Task
1
In the McAfee ePO console, navigate to Policy Catalog, select ePO Deep Command 2.1.0 as the product and
AMT Configuration Policies as the category, then click New Policy.
2
In the New Policy dialog box, perform these steps:
a
Select McAfee Default, type a name for the configuration policy and any notes, then click OK.
b
Select Allow ePO to enforce these settings, select Host based configure to enable Client Control Mode, then select a
host-based profile. If none of the host-based profiles is created in McAfee ePO, the default
host-based profile is listed as Default_HBC_Profile.
This configuration method doesn't need a configuration server.
c
Save the policy.
3
In the System Tree, assign the policy to the required systems or group.
• To assign the policy to selected systems, select the systems, click Actions | Agent | Set Policies &
Inheritance, select ePO Deep Command 2.1 as the product, select AMT Configuration Policies as the category,
select the modified configuration policy, select Break Inheritance, then save the policy assignment.
• To assign the policy to a system group or to the entire My Organization group, select the group,
select ePO Deep Command 2.1 as the product, click Edit Assignment next to AMT Configuration Policies, select
the modified configuration policy under Assigned policy, then save the policy assignment.
4
Enforce the policy using one of these methods:
• Wait for the next agent-server communication or send an agent wake-up call.
• From the Intel
®
AMT systems, click McAfee Agent Status Monitor, then click Collect and Send Properties,
Check New Policies, and Enforce Policies.
• Click Actions | AMT Actions | Enforce AMT Firmware Configuration Policy.
Configuring Intel AMT systems
Perform host-based configuration
4
McAfee ePO Deep Command 2.1.0 Product Guide
49