Could you provide screen shot of the issue. Are you seeing onboard clients authentication getting failed with host/<username> in access tracker? If YES, then I believe you have set user and machine option in onboarding setting, which got pushed with the certificate, due to that it may failing, during authenticaiton it is doing both mac/user auth. Could you set to user only and try.
Regards,
Pavan