Security

Reply
New Contributor
Posts: 1
Registered: ‎09-26-2013

anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.

anyone have issue with Clearpass and OS X 10.9?  Can successfully install profile.

Guru Elite
Posts: 20,560
Registered: ‎03-29-2007

Re: anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.

Do you have a public server certificate?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Regular Contributor I
Posts: 171
Registered: ‎10-22-2010

Re: anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.

Hi,

 

Will Clearpass 3.9.16, support Mac OS X 10.9?

Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.

You need to be running the latest CPPM "ClearPass Policy Manager 6.2.3.57998"

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Occasional Contributor I
Posts: 5
Registered: ‎09-10-2009

Re: anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.

We are running the latest version of CPPM.

We have a problem onboarding 10.9 macs.

We are currently using using a self signed certificate. We do push a user name and password, rather than use tls, to Apple devices.

Any thoughts?

I am going to try pushing tls to a 10.9 mac tomorrow.
Guru Elite
Posts: 20,560
Registered: ‎03-29-2007

Re: anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.

Laptopbrent,

The Onboarding process requires two main certificates: (1) the CPPM server certificate which Must be a public cert trusted by all IOS devices, because that is how the profile is pushed (2) the onboard CA cert, which can be self signed. What do you have?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 5
Registered: ‎09-10-2009

Re: anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.

Our Server certificate is signed by the clearpass onboard local CA.

 

Yes we realize this is not ideal.  The only issues we have are onbaording mac 10.9.  Onboariding other supported device si fine. issue.

 

I have attatched a screen shot of the error when someone tries to install a profile in 10.9.

 

 

Guru Elite
Posts: 20,560
Registered: ‎03-29-2007

Re: anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.


laptopbrent wrote:

Our Server certificate is signed by the clearpass onboard local CA.

 

Yes we realize this is not ideal.  The only issues we have are onbaording mac 10.9.  Onboariding other supported device si fine. issue.

 

I have attatched a screen shot of the error when someone tries to install a profile in 10.9.

 

 


Let me be clear:  To even push a profile successfully to a device over https, the server certificate must be public and trusted by IOS.  That is separate from the from the Onboard CA that actually issues the device certificate; that can be self-signed.  If your server certificate is not public and trusted by IOS, you will get that error.

 

If you uncheck "require https for guest access" and start redirecting onboard users to the http version of the website and it works, not having a public certificate is the issue.  If the http version of the website does not work, you have different problem and you should contact support:

onboard.png



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 5
Registered: ‎09-10-2009

Re: anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.

Again like I stated in the begginging.  We are not ideal here. I am not using a public cert.  So I cannot and am not using https, we are using http.

 

 

Guru Elite
Posts: 20,560
Registered: ‎03-29-2007

Re: anyone have issue with Clearpass and OS X 10.9? Can successfully install profile.

laptopbrent,

 

There could be a number of things that are wrong that support would be able to go through with you.  We only wanted to highlight the most common one.  I suggest you contact support, because users guessing on this forum would be painful, indeed.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: