Deployment Guide

Certificate Hierarchy 73
Certificate Configuration in a Cluster 74
Revoking Unique Device Credentials 74
Revoking Credentials to Prevent Network Access 74
Re-Provisioning a Device 75
Network Requirements for Onboard 75
Using Same SSID for Provisioning and Provisioned Networks 75
Using Different SSID for Provisioning and Provisioned Networks 76
Configuring Online Certificate Status Protocol 76
Configuring Certificate Revocation List (CRL) 76
Network Architecture for Onboard 77
Network Architecture for Onboard when Using ClearPass Guest 78
The ClearPass Onboard Process 79
Devices Supporting Over-the-Air Provisioning 79
Devices Supporting Onboard Provisioning 80
Configuring the User Interface for Device Provisioning 82
Customizing the Device Provisioning Web Login Page 83
Using the {nwa_mdps_config} Template Function 84
Certificate Authority Settings 84
Setting Up the Certificate Authority 86
Editing Certificate Authority Settings 88
Requesting a Certificate for the Certificate Authority 91
Installing a Certificate Authority’s Certificate 91
The Trust Chain and Uploading Certificates for the CA 93
Considerations for iOS Devices 95
Using Microsoft Active Directory Certificate Services 95
Creating a Certificate 97
Specifying the Identity of the Certificate Subject 98
Issuing the Certificate Request 99
Certificate Management 99
Searching for Certificates in the List 101
Working with Certificates in the List 101
Working with Certificate Signing Requests 103
Importing a Code-Signing Certificate 105
Importing a Trusted Certificate 107
Requesting a Certificate 108
Providing a Certificate Signing Request in Text Format 108
Providing a Certificate Signing Request File 109
Specifying Certificate Properties 110
Configuration Profiles 110
Profiles 111
Creating and Editing Configuration Profiles 111
Applications 112
Creating and Editing Application Sets 113
Exchange ActiveSync 114
Dell Networking W-ClearPass Guest 6.1 | Deployment Guide | 5