Automated mobile device provisioning and configuration for secure BYOD

ClearPass Onboard automatically configures and provisions mobile devices – Windows, macOS, iOS, Android, Chromebook, and Ubuntu – enabling them to securely connect to enterprise networks in support of BYOD initiatives.

IT can automatically give employees, contractors and partners permission to self-configure their personal devices. The ClearPass Onboard portal dynamically detects a device’s operating system and guides the user through the appropriate steps.

This provides an incredibly simple way to configure wireless, wired and VPN settings, apply unique per device certificates and profiles and ensure that users can securely connect their devices to 802.1X-enabled networks with minimal IT interaction.

ClearPass Onboard also increases the amount of usable context for troubleshooting user- and device-based policies and compliance reporting per device.

The result is a streamlined workflow that allows IT helpdesk personnel to efficiently automate multiple processes that are required to successfully carry out BYOD initiatives while offloading IT and improving the user experience.

Automated policy management
With ClearPass, IT can use context collected during onboarding to enforce device type and ownership-based network access policies. Centrally-defined policies also limit the types of devices that can be on-boarded and define which user groups can onboard devices.

Flexible workflow options
The onboard configuration process can be managed via IT-enabled and sponsor required workflows. User authentication can prompt for active directory or cloud identity credentials.

Customized device provisioning
A centrally managed administrator portal allows IT to configure device certificates and trust details, network access, VPN, and health check settings and authentication protocols for wireless and wired networks.
The IT staff can also define the number of devices that can be on-boarded per user and how long their certificates are valid.

Built-in certificate authority for BYOD
The distribution of published device credentials through ClearPass Onboard’s built-in CA safeguards organizations that want to adopt BYOD initiatives without requiring the implementation of an external CA. ClearPass Onboard issued certificates are unique as they also include specific user and device context.
The Onboard CA provides the option to utilize certificate management without the need to make changes to an internal public key infrastructure (PKI) or active directory (AD).
ClearPass also supports the distribution of Onboard generated certificates requested by third-party applications

• EMM/MDM using SCEP and EST (RFC 7030) protocols.

Revocation of unique certificates
Easy-to-use search and menu-driven capabilities ensure the rapid revocation and deletion of certificates for specific mobile devices if a user leaves a organization or the mobile device is lost or stolen.
Online Certificate Status Protocol (OCSP) supported.

Ordering Guidance

ClearPass Onboard can be ordered via perpetual license or subscription that includes support for the length of the subscription.

Ordering ClearPass Onboard involves the following steps:

• Determine the number of unique users you will provision within your environment.
• Select the total number of Onboard licenses.

Additional Onboard capacity can be purchased at any time to meet growth demands. ClearPass Onboard is licensed on a per user basis.

* Extended with support contract