Pre-Order Your HPE Networking ClearPass Exam HPE6-A88

To manage certificates in ClearPass Onboard, the administrator must drill down into the specific Certificate Authority (CA) that issued the credentials. From there, they can view a list of all issued certificates , search for the one belonging to the lost device (using the username or MAC address), and perform the Revoke action. This immediately invalidates the certificate for future 802.1X authentications.

ClearPass services are designed to be flexible with identity sources. In the Authentication tab of a service configuration, an administrator can add multiple sources (e.g., Active Directory, Guest Repository, and Local User Repository). ClearPass processes these sources in the exact order they appear in the list—attempting to authenticate the user against the first source, and moving to the next only if the user is not found in the previous one.

In any ClearPass cluster, there is exactly one Publisher . The Publisher is the only node that has full read/write access to the master configuration database. All changes made by administrators are written to the Publisher and then "pushed" (replicated) to the Subscriber nodes, which have read-only copies of the configuration for processing authentications.