Security

Reply
Regular Contributor II
Posts: 232
Registered: ‎09-11-2013

ClearPass onboarding cert question

Hi forum,

 

If I have a laptop that is used as a loaner for whoever needs it, does every user have to onboard or should it only be onboarded once?

I guest a good question, is the onboard certificate has the username of the AD member or the Machine name?

 

Thanks in advance,

Guru Elite
Posts: 20,789
Registered: ‎03-29-2007

Re: ClearPass onboarding cert question

If you are using user-based certificates, they are only available in the user context and each user would have to onboard.  If you are using machine or computer-based certificates, it only has to be done once.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

MVP
Posts: 4,228
Registered: ‎07-20-2011

Re: ClearPass onboarding cert question

If it is expected that only one user account or local account will be use to access the computer then it will only have to be onboard once using the account used initially to onboard the device

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Regular Contributor II
Posts: 232
Registered: ‎09-11-2013

Re: ClearPass onboarding cert question

Actually it will be used by multiple AD members and I’m not sure if the good old Onboarding issues user certs or machine certs.

Guru Elite
Posts: 8,325
Registered: ‎09-08-2010

Re: ClearPass onboarding cert question

It's configurable in your provisioning settings.


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor II
Posts: 232
Registered: ‎09-11-2013

Re: ClearPass onboarding cert question

Any idea which one is more secure? I guess user certs are more secure since the are tied to a user ad account.

Guru Elite
Posts: 8,325
Registered: ‎09-08-2010

Re: ClearPass onboarding cert question

They're both secure. One is just more granular.


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: