Security

Reply
SBS
Contributor II
Posts: 35
Registered: ‎11-04-2013

Onboarding Options for IPADs that are district owned

Hello,

I am seeking ideas for how to stream line our onboarding registration for our school board owned IPADs.   Originally when we started out we had a handful of IPADs so it was manageable to provision each device / onboard it.  Then pull it into an MDM solution.  No biggie, we associated to an SSID and registered the device using a local user account in Clearpass (we are running 6.5 these days).  Auth method is EAP-TLS and auth source is localhost, authorization source is [Local User Repository].  The IPAD gets 2 profiles:  Clearpass onboard local and Device Enrollment as part of the process. Fast forward a couple years, now there are > 1,200 IPADs that will need to be re-onboarded.  They are getting re-onboarded for a couple reasons 1) our cert is expiring and 2) all the devices will be wiped and enrolled in the Apple DEP program (Device Enrollment Program - lets you quickly assign Apple devices to your mobile device management (MDM) servers so you can automate enrollment, wirelessly supervise devices, and skip basic setup steps.   We have not yet seen the DEP process real time in our environment... but I'm wondering if there are options to more streamline the re-onboarding of the device process for the IPADs themselves.  Does anyone out there have enterprise / system owned IPADs that you onboard to your internal network and manage in a better more effective way?

 

Thanks for ideas,

Sarah

Guru Elite
Posts: 7,839
Registered: ‎09-08-2010

Re: Onboarding Options for IPADs that are district owned

What are you using for MDM? ClearPass supports SCEP which can automagically Onboard them as part of MDM enforcement.


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
SBS
Contributor II
Posts: 35
Registered: ‎11-04-2013

Re: Onboarding Options for IPADs that are district owned

airwatch is our MDM

Moderator
Posts: 456
Registered: ‎11-09-2012

Re: Onboarding Options for IPADs that are district owned

Just FYI - In my CPPM MDM TechNote their is a section covering ClearPass & AirWatch SCEP setup, might be worth a read.

 

Tech Note: ClearPass Enterprise Mobility Management Integration V5 


Best Regards
-d

Snr Tech Marketing Engineer - ClearPass

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Guru Elite
Posts: 7,839
Registered: ‎09-08-2010

Re: Onboarding Options for IPADs that are district owned

Take a look at page 56.

 

https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=19505


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
SBS
Contributor II
Posts: 35
Registered: ‎11-04-2013

Re: Onboarding Options for IPADs that are district owned

Thank you will give it a read.

 

SBS
Contributor II
Posts: 35
Registered: ‎11-04-2013

Re: Onboarding Options for IPADs that are district owned

Thank you!
Search Airheads
Showing results for 
Search instead for 
Did you mean: