Security

Reply
Occasional Contributor I

IOS Profile installation failed with OnBoard

Hello,

 

i am running 6.7 version of CPPM for a customer POC. since it's a POC we don't have any public certs. 

I created the Onboard CA in clearpass and used that to sign the radius certificate for Clearpass. Device enrollment for IOS is failing with error message " Profile installation failed",the server cartifcate for "https"//xxxx/guest/mdps_profile.php/xxxxxxxx is invalid.

 

i followed some of the previous community posts and disabled HTTPS both in  ClearPass and Controller captive portal profile.

also checked NO, for web server certifcate validation. 

 

is there anything else i can do to get this working for POC? 

 

thanks 

Kandhla

 

Guru Elite

Re: IOS Profile installation failed with OnBoard

You need to have a public HTTPS certificate. This is Apple's requirement.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
New Contributor

Re: IOS Profile installation failed with OnBoard

Hi, which OS (windows 7,10, macOS)?
New Contributor

Re: IOS Profile installation failed with OnBoard

Hi, which OS (windows 7,10, macOS)?
New Contributor

Re: IOS Profile installation failed with OnBoard

You could also create a temporary public certificate via verisign I think... they have a trial version if I recall
New Contributor

Re: IOS Profile installation failed with OnBoard

You could also create a temporary public certificate via verisign I think... they have a trial version if I recall
MVP
MVP

Re: IOS Profile installation failed with OnBoard

You can use a lets encrypt certificate for free for 90-days. Comodo also have trail certs..... or you buy some... is not that expensive 😉
Kind Regards Marcel Koedijk
HPE ASE Flexnetwork | ACMP | ACCP - Was this post usefull, Kudos are welcome.
Occasional Contributor I

Re: IOS Profile installation failed with OnBoard

Hi Kandhla,

 

Have you found your solution for this?  I am having the same issue.  Hoping for your reply.

 

 

Occasional Contributor I

Re: IOS Profile installation failed with OnBoard

Since I do not have public HTTPS certificate and I am using IOS device, I tried to change from https to http in the captive portal profile and it works.  

Highlighted
Guru Elite

Re: IOS Profile installation failed with OnBoard

You need to have a public certificate for HTTPS for ClearPass. You should not be running anything over HTTP.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: