QuickSpecs
HPE Aruba Networking ClearPass OnBoard Software QuickSpecs
Table of Contents
Automated mobile device provisioning and configuration for secure BYOD
ClearPass Onboard automatically configures and provisions mobile devices - Windows desktop, macOS, iOS, Android, Chromebook, and Ubuntu - enabling them to securely connect to enterprise networks in support of BYOD initiatives.
IT can automatically give employees, contractors and partners permission to self-configure their personal devices. The ClearPass Onboard portal dynamically detects a device's operating system and guides the user through the appropriate steps.
Overview
This provides an incredibly simple way to configure wireless, wired and VPN settings, apply unique per device certificates and profiles and ensure that users can securely connect their devices to 802.1X- enabled networks with minimal IT interaction.
ClearPass Onboard also increases the amount of usable context for troubleshooting, user- and device-based policies and compliance reporting per each device.
The result is a streamlined workflow that allows IT helpdesk personnel to efficiently automate multiple processes that are required to successfully carry out BYOD initiatives while offloading IT and improving the user experience.
Key Features
- − Enables users to self-register and securely onboard multiple devices
- − Supports Windows, macOS, iOS, Android, Chromebook and Ubuntu operating systems
- − Sponsor-based onboarding allows for custom workflows
- − Active Directory and cloud identity credential authentication supported
- − Automates the configuration of network settings for wired and wireless endpoints
- − Unique provisioning and revocation of device- specific credentials and certificates
- − Contains built-in certificate authority specifically for BYOD
- − Uses profiling to identify device type, manufacturer and model
- − Provides BYOD visibility and centralized policy management capabilities
Standard Features
The ClearPass Advantage
With the industry's most advanced auto-provisioning features, onboarding thousands of devices is amazingly simple via integrated policy management, customizable user-facing portal and built-in certificate authority (CA).
Automated policy management
With ClearPass, IT can use context collected during onboarding to enforce device type and ownership-based network access policies. Centrally-defined policies also limit the types of devices that can be on-boarded and define which user groups can onboard devices..
Flexible workflow options
The onboard configuration process can be managed via IT-enabled and sponsor required workflows. User authentication can prompt for active directory or cloud identity credentials.
Customized device provisioning
A centrally managed administrator portal allows IT to configure device certificates and trust details, network access, VPN, and health check settings and authentication protocols for wireless and wired networks.
The IT staff can also define the number of devices that can be on-boarded per user and how long their certificates are valid.
Advanced Onboarding Capabilities
Built-in certificate authority for BYOD
The distribution of published device credentials through ClearPass Onboard’s built-in CA safeguards organizations that want to adopt BYOD initiative’s without requiring the implementation of an external CA. ClearPass Onboard issued certificates are unique as they also include specific user and device context.
The Onboard CA provides the option to utilize certificate management without the need to make changes to an internal public key infrastructure (PKI) or active directory (AD).
ClearPass also supports the distribution of Onboard generated certificates requested by third-party applications – EMM/MDM using SCEP and EST (RFC 7030) proto
Revocation of unique certificates
Easy-to-use search and menu-driven capabilities ensure the rapid revocation and deletion of certificates for specific mobile devices if a user leaves a organization or the mobile device is lost or stolen.
Online Certificate Status Protocol (OCSP) supported.
Ordering Guidance
ClearPass Onboard can be ordered via perpetual license or subscription that includes HPE Aruba Networking Care for the length of the subscription.
Ordering ClearPass Onboard involves the following steps:
- Determine the number of unique users you will provision within your environment.
- Select the total number of OnBoard licenses.
Additional Onboard capacity can be purchased at any time to meet growth demands. ClearPass Onboard is licensed on a per user basis.
Configuration Information
Ordering Information | |
| Perpetual Licenses | |
| Description | SKU |
| HPE Aruba Networking ClearPass - Onboard License 100 Users E-LTU | JZ436AAE |
| HPE Aruba Networking ClearPass - Onboard License 500 Users E-LTU | JZ437AAE |
| HPE Aruba Networking ClearPass - Onboard License 1K Users E-LTU | JZ438AAE |
| HPE Aruba Networking ClearPass - Onboard License 2500 Users E-LTU | JZ439AAE |
| HPE Aruba Networking ClearPass - Onboard License 5K Users E-LTU | JZ440AAE |
| HPE Aruba Networking ClearPass - Onboard License 10K Users E-LTU | JZ441AAE |
| Perpetual Licenses Warranty | |
| 90 days | |
| Subscription Licenses (1 Year) | |
| HPE Aruba Networking ClearPass - Onboard License 100 Users 1-year Subscription E-STU | JZ445AAE |
| HPE Aruba Networking ClearPass - Onboard License 500 Users 1-year Subscription E-STU | JZ446AAE |
| HPE Aruba Networking ClearPass - Onboard License 1K Users 1-year Subscription E-STU | JZ447AAE |
| HPE Aruba Networking ClearPass - Onboard License 2500 Users 1-year Subscription E-STU | JZ448AAE |
| HPE Aruba Networking ClearPass - Onboard License 5K Users 1-year Subscription E-STU | JZ449AAE |
| HPE Aruba Networking ClearPass - Onboard License 10K Users 1-year Subscription E-STU | JZ450AAE |
| HPE Aruba Networking ClearPass - Onboard License 100 Users 3-year Subscription E-STU | JZ454AAE |
| HPE Aruba Networking ClearPass - Onboard License 500 Users 3-year Subscription E-STU | JZ455AAE |
| HPE Aruba Networking ClearPass - Onboard License 1K Users 3-year Subscription E-STU | JZ456AAE |
| HPE Aruba Networking ClearPass - Onboard License 2500 Users 3-year Subscription E-STU | JZ457AAE |
| HPE Aruba Networking ClearPass - Onboard License 5K Users 3-year Subscription E-STU | JZ458AAE |
| HPE Aruba Networking ClearPass - Onboard License 10K Users 3-year Subscription E-STU | JZ459AAE |
| HPE Aruba Networking ClearPass - Onboard License 100 Users 5-year Subscription E-STU | JZ463AAE |
| HPE Aruba Networking ClearPass - Onboard License 500 Users 5-year Subscription E-STU | JZ464AAE |
| HPE Aruba Networking ClearPass - Onboard License 1K Users 5-year Subscription E-STU | JZ465AAE |
| HPE Aruba Networking ClearPass - Onboard License 2500 Users 5-year Subscription E-STU | JZ466AAE |
| HPE Aruba Networking ClearPass - Onboard License 5K Users 5-year Subscription E-STU | JZ467AAE |
| HPE Aruba Networking ClearPass - Onboard License 10K Users 5-year Subscription E-STU | JZ468AAE |
| Notes: – Subscription and enterprise licenses can be purchased in 1-, 3- or 5-year increments for 100, 500, 1,000, 2,500, 5,000, and 10,000 endpoints. – Extended with support contract | |
Summary of Changes
| Date | Version History | Action | Description of Change |
|---|---|---|---|
| 27-Feb-2026 | Changed | Rebranding update applied to QuickSpecs | |
| 16-Dec-2024 | Changed | Overview section was updated | |
| 12-Feb-2024 | Changed | Networking product names were updated | |
| 18-Dec-2017 | Changed | Product overview, Advanced Onboarding Capabilities, Ordering Guidance and Ordering Information updated | |
| 04-Dec-2017 | Changed | SKUs added: JZ436AAE, JZ437AAE, JZ438AAE, JZ439AAE, JZ440AAE, JZ441AAE, JZ445AAE, JZ446AAE, JZ447AAE, JZ448AAE, JZ449AAE, JZ450AAE, JZ454AAE, JZ455AAE, JZ456AAE, JZ457AAE, JZ458AAE, JZ459AAE, JZ463AAE, JZ464AAE, JZ465AAE, JZ466AAE, JZ467AAE, JZ468AAE All document sections updated | |
| 16-Oct-2017 | Changed | HPE Aruba Networking information updated | |
| 01-Nov-2016 | Created | Document creation. |
© Copyright 2026 Hewlett Packard Enterprise Development LP. The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
To learn more, visit: http://www.hpe.com/networking
c05272681, - 15699 - Worldwide - V7 - 27-February-2026