search

open-amt-cloud-toolkit / enterprise-assistant

Apache License 2.0
0 stars 2 forks source link

readme

Enterprise Assistant

CodeQL OSSF-Scorecard Score Discord

Disclaimer: Production viable releases are tagged and listed under 'Releases'. All other check-ins should be considered 'in-development' and should not be used in production

Enterprise Assistant is a Windows application that can run as a normal application or as a background Windows service. Once setup to connect to RPS (hosted in either the cloud or enterprise), it can be used to assist with the configuration of AMT devices using TLS. Enterprise Assistant will handle certificate signing requests (CSRs) to Microsoft CA.

Enterprise Assistant is based off the open-source project MeshCentral Satellite.

For detailed documentation about Enterprise Assistant or other features of the Open AMT Cloud Toolkit, see the docs.


Enterprise Assistant Setup

Enterprise Assistant must run on a computer that is joined to your domain and run it with sufficient rights that it can create LDAP computer objects and have access to the domain Certificate Authority so it can request that certificates be signed.

It is suggested to run Enterprise Assistant as a normal Windows application at first to make sure everything works correctly before running it as a background Windows service. You can start by going in the "Settings" option in the menus and setting up the RPS server's hostname and login credentials. You also need to setup that certificate authority to use and certificate template. If a certificate authority is not setup, only PEAPv0/EAP-MSCHAPv2 will be supported.

You can use the "Testing" menu to create and remove a test computer from the domain. This is useful to make sure everything is working well before getting requests from RPS.


Additional Resources