HPE Networking ClearPass (HPE6-A88)

A Certificate Authority’s Certificates action displays the certificates associated with that CA, allowing the administrator to locate and revoke the specific client certificate issued to the lost device. Certificate revocation makes the certificate invalid for subsequent CRL or OCSP validity checks and prevents certificate-based authentication.

Aruba’s default captive-portal certificate uses securelogin.hpe.com as its common name. The captive-portal address must match the certificate’s common name; if the certificate common name differs, requests for securelogin.hpe.com will not align with the configured portal identity and interception/redirection can fail.

Active Directory is an enterprise identity repository that lets ClearPass validate user credentials and retrieve directory attributes for authorization and role mapping, providing rich user context such as group membership and other user properties.

A disabled guest account is not eligible to authenticate, so the registration receipt renders the Log In control inactive (grayed out) until the account is enabled or approved.

Combining MAC authentication with captive-portal authentication lets a guest complete the portal flow initially and associates the device MAC address with the guest access record. Subsequent connections can be recognized through MAC authentication for the valid access period, while the captive portal still provides controlled guest onboarding and account-expiration policies.