Preparing a certificate request for Remote Configuration
You must prepare a certificate request that you will use to create your own certificate or submit to one of the commercial SSL certificate providers, whose root certification authority hash is already in the firmware of the Intel AMT device.
You must do this for each OOB site server in your environment.
Log on to the OOB site server computer (by default, the Notification Server computer) using the Application Identity Account.
For more information about the Notification Server's Application Identity account, see the Symantec Management Platform User Guide.
From the OOB site server computer (by default, the Notification Server computer), open the Certificate Services Web page of your certification authority (CA) (http://<ca_server_name>/certsrv/) in the Internet Explorer.
Click Request a certificate.
Click advanced certificate request.
Click Create and submit a request to this CA.
From the Certificate Template drop-down list, click the template that you prepared and issued earlier (in this example, click AMT Remote Configuration).
If you are preparing a certificate request for your own certification authority:
Click Install this certificate to install the certificate.
The certificate installs into the Certificates - Current User > Personal > Certificates store. To view this certificate, add the Certificates - Current User snap-in to the Microsoft Management Console.
Enable the Remote Configuration feature in Out of Band Management Component.