We run a sponsored guest service where guest usage required someone to click "yes" on a web page.
Would it be possible to do this device (wired) onboarding? We're in a position where we want end users. to move to eap-tls but need someone to approve the onoboarding before it starts so that only devices that satisfty an approval process can have a certificate installed.
... or do i try and front end the onboarding solution with another sponsored guest type setup for wired connectivity so we have a special guest setup that points you at cppm onboard.
Is this about ClearPass Onboard? Note that ClearPass Onboard is for BYOD/unmanaged devices. If you have your devices under management, it's probably better to get certificates enrolled via that path (Group Policies/MDM).
You can enable sponsorship for Onboard directly in the last tab of the provisioning configuration:
I don't think there is HSM support in ClearPass. You may check/open a request on Aruba Innovation Zone.
© Copyright 2024 Hewlett Packard Enterprise Development LPAll Rights Reserved.