Skip to content

Aruba ClearPass

Preview feature

This feature is available in Preview and isn't yet generally available (GA). Functionality and behavior can change before GA.

Use this procedure to provision a certificate from Certificate Manager - SaaS to an Aruba ClearPass machine.

  1. Sign in to Certificate Manager - SaaS.

  2. Click Installations > Machines.

  3. Select the Aruba ClearPass machine where you want to install the certificate.

  4. Click Provision a certificate.

  5. From Choose a certificate from the inventory, search for and select the certificate you want to provision.

    Verify that you selected the correct certificate by reviewing the Subject DN, Validity, and Fingerprint.

  6. From Certificate Type, select where the certificate is installed on ClearPass:

    • Service Certificate (RADIUS/EAP, API) — A certificate in the ClearPass service certificate store.
    • Server Certificate Slot (HTTPS, RadSec, Database) — A per-node server certificate slot. ClearPass holds one certificate per slot, so provisioning replaces the existing certificate in place.
    • Certificate Store Entry — An entry in the general ClearPass certificate store.

  7. In Certificate Name, enter a human-readable name for this certificate (typically its subject or common name). This distinguishes multiple certificates on the same machine.

  8. From Service Usage, select the ClearPass service this certificate is bound to:

    • RADIUS/EAP
    • HTTPS
    • Onboard
    • RadSec
    • Database
    • Unbound (default)

  9. If you don't want the certificate to be pushed when you save, toggle the Push upon saving slider to No.

  10. Click Save.

    Note

    You can schedule your provisions daily, weekly, or monthly. See Set up a machine provisioning schedule.

After saving, Certificate Manager - SaaS builds a PKCS#12 file from the certificate, stages it to your configured AWS S3 bucket, and gives Aruba ClearPass a temporary URL to download and install it. An installation is created on the Installations tab.