Determine Whether You Should Configure Support for 802.1X and Wireless Networks
Published: October 1, 2009
Applies To: System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP2
Configuration Manager 2007 SP2 supports managing AMT-based computers out of band when these computers are connected to an 802.1X authenticated wired network or a wireless network. Use the following information to help you decide whether to configure out of band management support for these networks.
|The information in this topic applies only to Configuration Manager 2007 SP2.|
Consider configuring out of band management support for an 802.1X authenticated wired network or a wireless network if all of the following conditions apply:
The AMT version is 4.0 or greater and is supported by Configuration Manager 2007 SP2. For supported AMT version information, see Configuration Manager 2007 SP2 Supported Configurations.
You have the infrastructure support for 802.1X authenticated wired networks and wireless networks as documented as an external dependency in Prerequisites for Out of Band Management.
If your RADIUS solution requires client PKI certificates, your enterprise CA can automatically issue these certificates to the site server on behalf of AMT-based computers. For more information about this certificate requirement, see Certificate Requirements for Out of Band Management and About Certificates for Out of Band Management.
AMT-based computers can be provisioned and the management controller can be updated when these computers connect to an Ethernet port on which 802.1X authentication is not required or when they connect to an 802.1X authenticated network through the operating system when the computer is not in hibernation or switched off.
DHCP is being used and updates DNS with host records that contain the IP address of the host computer (if an operating system is installed) and the IP address configured in AMT for the AMT-based computer.
Note This condition results in multiple host records with different IP addresses for the AMT-based computer. Out of band management connections use the fully qualified domain name of the AMT-based computer, and Configuration Manager is unable to know whether the IP address retrieved from name resolution is for the host computer or AMT. Therefore, the choice of which address to use will be nondeterministic. This might result in connection failures if the host computer address is used when the computer is in hibernation or turned off.
You want to extend out of band management support on an 802.1X authenticated wired network or a wireless network for tasks such as powering on a computer for maintenance or installing a software update, re-imaging a computer, and restarting a computer that has stopped responding.
TasksHow to Configure AMT-Based Computers for 802.1X Authenticated Wired and Wireless Networks
How to Configure AMT Provisioning
How to Update AMT Settings in Provisioned Computers Using Out of Band Management
ConceptsAbout AMT Provisioning for Out of Band Management
Overview of Out of Band Management
Other ResourcesPlanning for Out of Band Management
Tasks for Out of Band Management
For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email SMSdocs@microsoft.com.