To my knowledge, only client/device certificates (that have not expired or are revoked), count as one Onboard license per user.
From the documentation: "Onboard license usage is computed based on the number of users with Onboard-generated device certificates."
A server certificate is not supposed to count against Onboard licenses in my experience.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Jun 04, 2024 12:45 PM
From: chulcher
Subject: Clearpass integration with Azure/Intune PKI
Every certificate issued using an Onboard CA requires Onboard licensing to be in place.
------------------------------
Carson Hulcher, ACEX#110
Original Message:
Sent: Jun 04, 2024 12:37 PM
From: jonas.hammarback
Subject: Clearpass integration with Azure/Intune PKI
Either buy a certificate from a public CA, or configure ClearPass as a Root CA and issue the needed server certificate from this CA.
Server certificates does not need an Onboard license as the client certificates do
------------------------------
Best Regards
Jonas Hammarbäck
MVP Guru 2024, ACEX, ACDX #1600, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACSA
Aranya AB
If you find my answer useful, consider giving kudos and/or mark as solution
Original Message:
Sent: Jun 04, 2024 11:24 AM
From: chulcher
Subject: Clearpass integration with Azure/Intune PKI
I'm not seeing any indication that such is possible. They'll need to use a separate PKI to issue the certificate for ClearPass and then use Intune to make sure that the client devices have the correct trust anchors in place.
------------------------------
Carson Hulcher, ACEX#110
Original Message:
Sent: Jun 04, 2024 11:05 AM
From: SLC
Subject: Clearpass integration with Azure/Intune PKI
Hi,
That is because this is the Root CA within our customer's deployment. We just need a valid certificate on Clearpass and unfortunately Cloud PKI is what would be the issuer.
Original Message:
Sent: Jun 03, 2024 04:00 PM
From: chulcher
Subject: Clearpass integration with Azure/Intune PKI
Talking about Microsoft Cloud PKI for Microsoft Intune? That appears to be a PKI setup strictly for managed devices. Why would ClearPass need a certificate from the Cloud PKI?
------------------------------
Carson Hulcher, ACEX#110
Original Message:
Sent: May 31, 2024 05:04 AM
From: SLC
Subject: Clearpass integration with Azure/Intune PKI
Hello,
One of our customers will be migrating to the Azure/Intune PKI environment. We have been asked if its possible to create a cert for the Clearpass Server from the Azure/Intune PKI. Has anyone managed to get this to work previously?
Thank you in advance for any contribution.
Kind regards