Hi Jan,
at least in my case yes to both

I operate a FAI wheezy server with a bunch of wheezy workstations.
For softupdates (which may contain some re-configurations), I connect to the workstations with ssh and start the softupdate with "fai -N softupdate". Then the config space is mounted from the server (nfs) and fai performs the necessary updates.

=> To automatize it, I have a perl-routine which starts a parallel softupdate on all hosts. The routine basically opens an ssh-session on each host and executes "fai -N softupdate". For the passwords, an "expect" template is used. I only have to enter the password at the beginning, then expect will automatically handle it for each parallel ssh-session.

I hope this helps you

Regards
René Bleisch

On 09/19/2014 12:37 PM, Jan Bredereke wrote:
Dear FAI users,

I am currently evaluating FAI and have a question which I could not
answer from the documentation:

When I use FAI for configuring some (already installed) clients, can
I have the communication encrypted? And can I have authentication?
If the communication can run over Ssh, the the answer to both would
be "yes". But I did not find anything on how the actual low-level
communication is done during configuring a client.

Thank you very much for any information or docs pointer,
Jan Bredereke

Antwort per Email an