Support for a Workgroup Environment
You can configure and use most Intel AMT settings on systems in a peer-to-peer network (a Workgroup). This table shows settings that require services that are not usually available in a Workgroup.
| # | To define this setting... | You must have... |
|---|---|---|
| 1 | Active Directory Integration |
Access to an Active Directory (AD) Note:
|
| 2 | Kerberos Users | |
| 3 | 802.1x Setups | |
| 4 | Endpoint Access Control (EAC) | |
| 5 | Transport Layer Security (TLS) |
Access to a Certification Authority (CA) Note: If you define Remote Access to use password-based authentication, access to a CA is not necessary. |
| 6 | Remote Access | |
| In a Workgroup without access to a Domain you cannot configure settings #1 - #4 on Intel AMT systems. You can configure settings #5 and #6, but only on systems with Intel AMT 6.2 and higher. | ||
Users in a Workgroup do not have the necessary permissions to connect to the AD or the CA. This means that the Intel SCS component, which is running on a computer in the Workgroup, cannot access the AD/CA.
Thus, to configure these settings in a Workgroup, you must use one of these methods:
Method #1: Supply a user with the necessary permissions
- In the Profile Designer, create a profile with the settings that you want to configure.
- When you save the profile, in the “Finish” window, supply the username and password of a user that has permissions to connect to the AD/CA.
Method #2: Prepare the necessary data in files
- In the Profile Designer, create a profile with the settings that you want to configure.
- To define Active Directory Integration, select the “Path to file containing ADOU information” option (see Defining Active Directory Integration).
- For each setting with which you want to use certificate-based authentication, select the “Use certificate from a file” option (see Using Predefined Files Instead of a CA Request).