Product guide

3
Select Allow ePO to enforce these settings, then perform one of these steps based on configuration mode
of systems.
• Admin Control mode — Select Remote configure to enable Admin Control Mode, select Unconfigure (if
currently configured by ePO), and then select the Intel
®
RCS server and profile used for the
configuration.
• Client Control mode — Select Host-based configure to enable Client Control Mode, select Unconfigure (if
currently configured by ePO), and then select the profile used for the configuration. The Intel
®
AMT
systems in this mode do not require an Intel
®
RCS server. They use the host-based profile to
configure or unconfigure the client.
4
Select the appropriate unconfigure options.
• Also remove the pre-shared keys or hash data of self-signed CA certificates configured on the client systems manually. —
Removes the configuration completely.
• Force unconfigure even if it is not configured by ePO — Removes the configuration from a system that was
not configured using McAfee ePO.
5
Save the policy.
See also
Unconfigure Intel AMT systems through McAfee ePO on page 54
Move systems from Client Control to Admin Control mode
Move Intel
®
AMT systems that were configured using host-based configuration to run in Admin Control
mode.
Before you begin
Make sure that the Intel
®
AMT systems meet the requirements and prerequisites for Admin
Control mode. See Requirements and Prerequisites for remote configuration.
When you configure your Intel
®
AMT systems using the host-based configuration, the system is
automatically placed in Client Control mode that has limited access. However, you can move your
systems to run in Admin Control mode.
Task
For option definitions, click ? in the interface.
1
In the McAfee ePO console, from Policy Catalog, select ePO Deep Command 2.1.0 as the product and AMT
Configuration Policies as the category, then click New Policy.
2
Type a name for the policy and any notes, then click OK.
3
Select Allow ePO to enforce these settings, select Remote configure to enable Admin Control Mode, select Move to Admin
Control Mode if currently in Client Control Mode, then select the Intel
®
RCS server and profile to be used for
the configuration.
Make sure to select the required profile. By default, the first profile in the list is used.
4
Save the policy.
When this policy is enforced, the Intel
®
AMT systems in Client Control mode are unconfigured, then
configured again using remote configuration. Intel
®
AMT policy is enforced on the clients to
synchronize data. See Server Task Log for the policy status.
Managing your Intel AMT systems
Using policies to manage Intel AMT systems
8
McAfee ePO Deep Command 2.1.0 Product Guide
95