IDE-R protocol and authentication ?

[ravanrip]

Hi, I was wondering what protocol IDE-R uses ? Is it simply tftp, or something proprietary ? Are there places in the protocol where one could digitally sign the image and check it on the client ?

I'm concerned with tampering of the image as it traverses the network, and authentication as well to make sure the image is coming from my SCS server and not some rogue on the network.

Thanks!

[RBens2 · Accepted solution]

Hi Ravanrip,

If you're concerned about the image getting hijacked, then you need to setup the system to do TLS. TLS will encrypt the data as it traverses the network. The datasteam will be as secure as any other Internet data stream.

Regards,
Roger

[ravanrip]

Interesting. So I found information that one can connect to the AMT via TLS but if you remotely boot a machine with IDE-R is it still TLS secured ? or does this protection exist only when communicating with the AMT for things like assets etc. ?

[RBens2]

When you configure the system in Enterprise mode with TLS, all of the data between the remote management console and the MEcan beencrypted, including all of the IDER traffic. The TLS connection is only between the Remote console and the ME. Any traffic between the image that was booted and the remote console is the responsibility of the image.

Regards,
Roger