Administrator Guide

This occurs if the hostname used to access W-ClearPass does not match the hostname configured in the
W-ClearPass server certificate. These items must match or device provisioning will fail. This error is detected by
Onboard and results in the above message.
Resolution: To correct the problem, ensure that the DNS is correctly configured for the server, ensure that the
hostname is correctly set, and ensure that the server's certificate contains the correct hostname.
Onboard Interface Not Displayed
If Onboard is not visible in the W-ClearPass Guest user interface, verify whether Public Facing Enterprise (PFE)
mode is set in W-ClearPass Policy Manager. If PFE mode is enabled, Onboard is not permitted and Onboard
licenses cannot be added. The PFE mode is enabled or disabled in W-ClearPass on the Mode tab at
Administration > Server Manager > Server Configuration > Cluster-Wide Parameters.
Certificate Renewal through OS X Mavericks
OS X Mavericks allows users to renew certificates automatically, and provides a notice and an update link in the
Mavericks Profile fifteen days before a certificate expires. Onboard supports certificate renewal through OS X
Mavericks. However, only local certificates can be renewed; ADCS is not supported. Also, certificates that have
been revoked cannot be renewed.
Certificate Authorities
You can create and manage multiple certificate authorities for Onboard. To view and work with the list of
certificate authorities and to configure new certificate authorities, go to Onboard >Certificate Authorities.
The Certificate Authorities list view opens. All certificate authorities that have been set up are included in the
list. Information shown for each certificate authority includes its name, mode, status, expiration time, and
OCSP URL.
Figure 64 The Certificate Authorities List View
You can click a certificate authority's row in the list for additional options:
Dell Networking W-ClearPass Guest 6.6 | User Guide Onboard | 115