Intel Unite Solution - Enterprise Deployment Guide

Intel Unite® Solution Enterprise Deployment Guide v3.1.7 79 of 83
Step 1: PIN Assignment
The image below shows how PINs are assigned. All network communication during this process is SSL
encrypted over a web service (TCP 443).
In addition to receiving PINs, the Hub and Client also register their connection information and a public key
to the server. The public key is used during connection to validate that each component is communicating
with the intended target.
Note: PIN assignment for Client (with Intel vPro technology) and Hub follow the same flow.
Also note the following:
The PIN refresh interval is configurable.
When Hub or Client sends connection information, IP addresses in the local host (127.0.0.0/8) and
169.254.0.0/16 ranges are ignored.
The TCP port can be configured per Client or Hub, or pushed via a profile from the Admin Portal.
The default behavior is to let the operating system assign a port.
Expired PINs will be allowed access for up to 15 seconds.
Expired PINs will not be reassignment for up to 5 minutes after expiration to ensure that users
don’t accidentally connect to the wrong display.