Deployment Guide

Certificate Configuration in a Cluster 80
Revoking Unique Device Credentials 80
Revoking Credentials to Prevent Network Access 81
Re-Provisioning a Device 81
Network Requirements for Onboard 81
Using Same SSID for Provisioning and Provisioned Networks 82
Using Different SSID for Provisioning and Provisioned Networks 82
Configuring Online Certificate Status Protocol 82
Configuring Certificate Revocation List (CRL) 82
Network Architecture for Onboard 83
Network Architecture for Onboard when Using ClearPass Guest 84
The ClearPass Onboard Process 85
Devices Supporting Over-the-Air Provisioning 85
Devices Supporting Onboard Provisioning 87
Configuring the User Interface for Device Provisioning 89
Using the {nwa_mdps_config} Template Function 90
Onboard Troubleshooting 90
iOS Device Provisioning Failures 90
Hostname-to-Certificate Match Failures 91
About ClearPass WorkSpace 91
Key Features 91
Device Management and Network Access 91
How WorkSpace Works 92
About the WorkSpace App 92
Supported Platforms 92
Initial Setup 93
Certificate Authorities 93
Creating a New Certificate Authority 94
Editing Certificate Authority Settings 97
Requesting a Certificate for the Certificate Authority 101
Installing a Certificate Authority’s Certificate 101
Using Microsoft Active Directory Certificate Services 103
About Push Certificates 105
Creating a Certificate Signing Request for Device Management 105
Installing a Push Certificate 106
Downloading a Push Certificate 106
Viewing Push Certificate Details 107
About iOS Distribution Certificates 107
Creating a Certificate Signing Request 107
Installing a Distribution Certificate 108
Downloading the Distribution Certificate 109
Viewing the Distribution Certificate 109
About iOS Provisioning Profiles 109
Dell Networking W-ClearPass Guest 6.3 | User Guide Contents | 5