Security

Reply
Frequent Contributor I
Posts: 84
Registered: ‎09-08-2015

ClearPass Onboard iOS - Install root certificate twice?

When provisioning an iOS device through onboard, why does the root CA certificate get installed twice?

 

1) At the logon prompt, there is a button to 'Install root certificate'

2) Before installing the profile the same certificate is installed with the message:

'Install certificate to continue device configuration'

Guru Elite
Posts: 8,643
Registered: ‎09-08-2010

Re: ClearPass Onboard iOS - Install root certificate twice?

There is usually the root certificate then the root signing certificate. One is for the actual client cert itself and the other is for the profile/enrollment.


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I
Posts: 84
Registered: ‎09-08-2015

Re: ClearPass Onboard iOS - Install root certificate twice?

Aah, that makes sense:

 

In our case, we are using the same Root CA for both purposes:

 

Profile Signing:

Corp Root CA

-> ClearPass Profile Signing CA

 

Certificate Enrollment:

Corp Root CA

-> Corp Issuing CA

--> Client Certs (Enrolled by ADCS)

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: