Android, iOS, Windows, and Apple devices can be onboarded. All onboarding is done via the ClearPass web page.
I don't believe it's possible to manually create a certificate if you're using the ClearPass as your CA. However, if you have another CA, then you could issue a certificate that way. Correct me if I wrong, someone...