User's Manual

1. The only user interaction required is to accept the provisioning profile. This profile is signed by the Onboard
server, so that the user can be assured of its authenticity.
2. An iOS device will have two certificates after over-the-air provisioning is complete:
a. A Simple Certificate Enrollment Protocol (SCEP) certificate is issued to the device during the provisioning
process. This certificate identifies the device uniquely, and is used to encrypt the device configuration
profile so that only this device can read its unique settings.
b. A Transport Layer Security (TLS) client certificate is issued to the device. This certificate identifies the
device and the user that provisioned the device. It is used as the device’s network identity during EAP-
TLS authentication.
Devices Supporting Onboard Provisioning
Dell Networking W-ClearPass Onboard supports secure device provisioning for Microsoft Windows XP (service
pack 3 and later), Microsoft Windows Vista, Microsoft Windows 7, Apple Mac OS X 10.5 and 10.6, and Android
devices (smartphones and tablets). These are collectively referred to as “Onboard-capable devices”. The
Onboard process for these devices is shown in Figure 17.
Figure 17 W-ClearPass Onboard Process for Onboard-Capable Devices
The Onboard process is divided into three stages:
1. Pre-provisioning. This step is only required for Android devices; the W-Series QuickConnect app must be
installed for secure provisioning of the device.
2. Provisioning. The device provisioning page detects the device type and downloads or starts the
QuickConnect app. The app authenticates the user and then provisions their device with the Onboard
server. The device is configured with appropriate network settings and credentials that are unique to the
device. See Figure 18 for details.
3. Authentication. After configuration is complete, the user switches to the secure network and is
authenticated using PEAP-MSCHAPv2 unique device credentials.
Dell Networking W-ClearPass Guest 6.4 | User Guide Onboard | 93