The administrator should select the certificate authority, view the issued certificates, and revoke the specific certificate associated with the lost device. This action immediately invalidates the certificate, ensuring that the lost device can no longer authenticate or gain access to the network.

In a Pre-Authentication workflow (often used in Captive Portals), ClearPass first checks the user's credentials locally or against an external source before the actual NAD (switch/controller) sends the final RADIUS request. For this to work seamlessly, the same service or logic in ClearPass must be able to handle the initial check and the subsequent NAD request to ensure consistency in role assignment and session tracking.

ClearPass Profiler is used to identify and classify devices connected to the network based on various characteristics, such as device type, operating system, and other identifiers.

Pre-authentication checks validate credentials before full authentication processing occurs. This provides immediate feedback to users and avoids unnecessary redirects, resulting in a faster and smoother login experience.