To manage certificates in ClearPass Onboard, the administrator must drill down into the specific Certificate Authority (CA) that issued the credentials. From there, they can view a list of all issued certificates , search for the one belonging to the lost device (using the username or MAC address), and perform the Revoke action. This immediately invalidates the certificate for future 802.1X authentications.

ClearPass Guest's Form Editor provides contextual placement for new fields. To ensure a field appears in a specific order, the administrator should first highlight the field that will follow the new one. By selecting
'Insert Before' , the editor places the new field directly above the selected item in the form's logical flow, ensuring the user sees the questions in the intended sequence.

Operator logins (logins to the CPPM/Guest/Onboard admin interfaces) are managed by the Admin User Repository . To apply a custom enforcement profile, you must first define a new Role that signifies those specific privileges. You then create a rule in the admin enforcement policy that says: "If User has [New Role], then apply [Custom Enforcement Profile] ." This links the user's identity to the specific administrative rights you've defined.

If cached results are not enabled on the Enforcement tab, ClearPass repeatedly reprocesses policy evaluations instead of reusing previously computed posture and role decisions. This causes the same enforcement outcomes to be applied even after client status changes, leading to inefficient access control behavior.

Network access devices, including Aruba Instant APs and controllers, generally require certificates in the PEM (Privacy Enhanced Mail) format. PEM certificates are Base64 encoded and are standard for Unix- based systems and networking hardware because they can easily include the entire trust chain (server, intermediate, and root certificates) in a single text file.