It's probably been mentioned, but the cummulative patch is required for 10.9 -->
Patch ClearPass Cumulative Patch 2 for 6.2.0 and 6.2.1* 321.8707MB 2013/10/1 2013/10/8 Last checked {Installed)
All nodes (including the publisher (CPPM5000) are patched to 6.2.3.57998 on CP-VA-5K Platform
That being said, our IT folks have been able to OnBoard, but only by downloading the Profile (last stage) and then installing it manually.
The normal behaviour of the installation Profile "bouncing up" fails after 30-60seconds of working. It is not a permissioning or Keychain problem.