Specifications

ClearPass 6.2.5 | Release Note Known Issues Identified in Previous Releases | 35
Onboard
OnGuard
Table 40 Known Issues in Onboard
Bug ID Description
9897 ClearPass Onboard does not update the Policy Manager endpoints table with an endpoint record when
provisioning an iOS 5 device. This is because the iOS 5 device does not report its MAC address to
ClearPass Onboard during device provisioning.
10127 Auto-reconnect does not work for Mac OS X 10.7. This client will reconnect using the original credentials
that were used to connect to the SSID (PEAP instead of TLS). This happens even if the “Remember this
Network” option is NOT selected when connecting to the provisioning network.
10667 When using Onboard to provision a OS X system with a system profile, an administrator user must
select the appropriate certificate when connecting to the provisioned network for the first time. The
administrator should also ensure that the system's network settings are configured to automatically
prefer connecting to the provisioned network, if the intent is for non-administrator users to always use
that network.
The process to provision an OS X system with a system profile is:
 The administrator should log in to the OS X system and connect to the provisioning SSID. Do not
select “Remember this network.”
 Use Onboard to provision the device with an EAP-TLS profile, ignoring the username/password
prompt.
 Connect to the provisioned network, selecting EAP-TLS as the mode and selecting the provisioned
certificate, but ignoring the username field.
 When the system connects and authorizes to the network, use Network Preferences to place the
EAP-TLS network first in the priority list.
 After the administrator logs out, users logging in are connected by EAP-TLS and cannot modify
those settings.
Memory utilization for ClearPass OnGuard depends on the Health Classes configured and the type of Windows OS;
however, the minimum requirement for ClearPass OnGuard running on a Windows platform is 90 MB.
Table 41 Known Issues in OnGuard
ID Description
OnGuard fails to collect health on Windows 8 OS if VMWare Server 2.0.2.X is installed.
Symptom: Upgrading ClearPass OnGuard from versions 3.5, 4.0, 5.0, 5.0.1, 5.1.1, and 5.2 to 6.0 will
fail if the OnGuard installer is invoked without administrative privileges on the client.
Scenario: This applies to the MSI version only.
Workaround: Execute the msiexec/I ClearPassOnGuardInstall.msi command from the
windows command prompt as the administrator user.
Disabling USB storage devices on Windows 2008 server (64-bit) is not supported.
Migration of Posture Policies from earlier versions of ClearPass Policy Manager to 5.1.x/5.2.0/6.0 is not
supported.
Workaround: Add/configure posture policies directly on the upgraded version of CPPM again.
Live updates for Windows Defender is not supported on Windows 8, and users cannot browse the URL
provided in the OnGuard remediation messages.