Examples of using Amt-based computer in English and their translations into Russian
{-}
-
Official
-
Colloquial
In this connection, the AMT-based computer is the server, and the out of band service point is the client.
The request uses PKCS 10 for the request format, which in turn,uses PKCS 7 for transmitting the certificate information to the AMT-based computer.
When an AMT-based computer is blocked because it is no longer trusted, you have the following options.
You can save the current audit log entries and delete them from an AMT-based computer by using the out of band management console.
The AMT-based computer undergoes first-stage provisioning, initiated by a SOAP request from the out of band service point.
When a name is used rather than an IP address, the AMT-based computer must be configured with an FQDN and at least one DNS server.
The AMT-based computer completes the authentication challenge and sends a success or failure response to the out of band service point.
The out of band service point establishes an application layer connection with the AMT-based computer, using HTTP Digest authentication.
When an AMT-based computer first starts up, it uses DNS to resolve the name of the provisioning server using one of the following methods.
This IP address must be owned by the out of band service point site system server in the Configuration Manager site that will manage the AMT-based computer.
This is particularly risky when the AMT-based computer is a laptop and might be disconnected from the network or on a wireless connection.
For Configuration Manager 2007SP2 and later,displays audit logging information when this is supported by the AMT-based computer and auditing is enabled.
The AMT-based computer sends a server“Hello” message to the out of band service point and sends its public key with a self-signed certificate.
With the alternative name resolved to the IP address of the out of band service point site system server, the AMT-based computer then contacts this server to begin the provisioning process.
The AMT-based computer undergoes second-stage provisioning, initiated by a Windows Remote Management(WinRM) request from the out of band service point.
In Configuration Manager 2007SP2,client certificates specified in a wireless profile will not be renewed with this maintenance task if the AMT-based computer is connected over a wireless network.
The AMT-based computer responds to the out of band service point with an"authentication needed" response, which results in HTTP Digest authentication.
If the computer account password is reset independently from the AMT remote password,Configuration Manager will be unable to connect to the AMT-based computer by using out of band communication.
If the AMT-based computer is currently on a wireless connection, this connection might be disconnected for the duration of the serial-over-LAN session.
The out of band service point sends an instruction to the site server to create an Active Directory account in the configuredActive Directory container(or OU) and to set the SPN for the AMT-based computer.
The AMT-based computer sends a“Hello” message to the out of band service point once every minute for 5 minutes, then once every 5 minutes for an hour, and then once an hour for 23 hours.
If you think you might unblock the client later and you can verify a connection to the AMT-based computer before blocking the client, you can remove provisioning information with Configuration Manager and then block the client.
When an AMT-based computer is blocked, the following actions automatically occur to help protect the network from the security risks of elevation of privileges and information disclosure.
The out of band service point sends the results of the provisioning process to the site server,which then updates the Configuration Manager database with the following information about the AMT-based computer: the AMT status; the MEBx password, the AMT Remote Admin Password.
Although the AMT-based computer is authenticated to the computer managing it, there is no corresponding client PKI certificate on the computer managing it.
The AMT client agent on the Configuration Manager 2007SP1 or later client generates a random one-time password(OTP), hashes it, sends the hash to the site server, andthen activates the AMT network interface so that the AMT-based computer is ready for provisioning.
The AMT-based computer might have multiple certificates because Configuration Manager 2007SP2 supports 802.1X authenticated wired and wireless networks that support client certificates.
The out of band service point retrieves the OTP hash for this AMT-based computer from the site server and compares it with the OTP hash reported by the AMT client agent to verify the identity of the AMT-based computer to be provisioned.
Although the AMT-based computer is authenticated to the computer managing it, there is no corresponding client PKI certificate on the computer managing it. Instead, these communications use either Kerberos or HTTP Digest authentication.
On first startup from the manufacturer, the AMT-based computer sends a“Hello” message to the out of band service point(once every minute for 5 minutes, then once every 5 minutes for an hour, then once an hour for 23 hours).