Client Management Suite

I have a question for the folks that have rolled out Vpro successfully. I am trying to figure out the certificate part. I have Altiris on an internal domain, that is not the company domain, and the external company domain. So when asking for the cert do I ask for both or just the internal domain. My worry is, does the cert also work for reaching out and grabbing machines outside your firewall? Any help would be greatly appreciated.

The important factor is your DHCP option 15 setting for the internal network.   This can be obtained in a number of ways:

• Find the "Connection Specific DNS suffix" from an IPconfig /all
• Use the SystemDiscovery tool on a test client (download from http://software.intel.com/en-us/articles/download-the-latest-version-of-intel-amt-setup-and-configuration-service-scs/, more information on using with custom inventory at http://www.symantec.com/connect/articles/environment-assessment-report-intel-vpro-technology-part-2.    You want the "OSPrimaryDNSSuffix" field"... and ensure it's the same throughout enterprise... or refer to the root)

When requesting the certificate, if your DHCP option 15 setting is vastly different than your external domain presence the issuing certificate authority may request additional data to validate and complete the request.

Hope that helps.

I have found my answer. The Certificate only allows the Laptop to talk to the node server. My option 15 is set to the internal domain. I was under the assumption this was also used for reaching beyond the firewall and accessing a machine. I have found that i need a gateway server for this and am looking for that information to set and test.