User's Manual

l Configure the identity, private key, and self-signed certificate attributes
To create an Onboard certificate authority:
1. Go to Onboard >Certificate Authorities, and then either click the Duplicate link for a certificate
authority in the Certificate Authorities list or click the Create new certificate authority link. The initial
setup page of the Certificate Authority Settings form opens.
2. In the Name field, give the CA a short name that identifies it clearly. Certificate authority names can include
spaces. If you are duplicating a CA, the original name has "Copy" appended to it. You may highlight the
name and replace it with a new name.
3. In the Description field, briefly describe the CA. This description is shown in the Certificate Authorities list.
The Name and Description fields are used internally to identify this certificate authority for the network
administrator. These values are never displayed to the user during device provisioning.
4. The mode is used to set up the mode of operation for the certificate authority. In the Mode area, click one
of the descriptions to specify the type of certificate authority:
l Root CAThe Onboard certificate authority issues its own root certificate. The certificate authority
issues client and server certificates using a local signing certificate, which is an intermediate CA that is
subordinate to the root certificate. Use this option when you do not have an existing public-key
infrastructure (PKI), or if you want to completely separate the certificates issued for Onboard devices
from your existing PKI.
Dell Networking W-ClearPass Guest 6.4 | User Guide Onboard | 99