Contents Chapter 1 Release Overview ..................7 Supported Browsers....................7 Virtual Appliance....................7 System Requirements ...................8 VMware Requirements ..................8 VMware Player / VMware Workstation............8 Configuring VMware Player ..............9 Timekeeping in Virtual Machines ..............9 Evaluation License....................9 Contacting Support ....................9 Chapter 2 What’s New in This Release ..............11 Introducing ClearPass Guest and ClearPass Onboard ........11 Administrative ......................11 Default Login Access Setting Now HTTPS ...........11...
Page 4
RADIUS Services ....................22 MAC Auto-Registration in ClearPass Policy Manager ........22 Internal Authorization Type Configuration Option.........22 Extra Spaces Trimmed from Values on Web Login ........23 SMS Services ......................23 Support for Conversion to 16-Bit Hex Encoding ..........23 POST Method Supported ................23 SMTP Services ....................24 Email Format Cleanup Supported..............24 Chapter 3 Fixed Issues ...................
Page 5
Parsing Value Error ..................31 Scrolling Behavior on Apple Devices ............31 Skins ........................31 HTML Error on iPhone During Device Provisioning ........31 Chapter 4 Known Issues..................33 General ........................33 Onboard (Mobile Device Provisioning Services) ..........33 SMS Services ......................33 Chapter 5 Upgrade Procedure ................35 Important Points to Remember ................35 Before you Upgrade ....................35 Setting System Memory ..................35...
Chapter 1 Release Overview ClearPass Guest 3.9.1 is a patch release that introduces new features and fixes to previous outstanding issues. This release note contains the following chapters: Chapter 2, “What’s New in This Release” on page 11—Describes the new features introduced in this ...
System Requirements When deploying a ClearPass Guest virtual machine, the following minimum system resources are required: Table 1 Virtual Machine Requirements Resource Minimum Recommended Configuration 1 virtual CPU Memory 1024 MB Storage 8 GB virtual disk Network Adapters 2 virtual NICs This configuration is the minimum recommended and is suitable only for very small-scale deployments or to support basic evaluation and testing.
Configuring VMware Player If you are using VMware Player and your host machine has more than one Ethernet adapter installed, you might encounter difficulties obtaining a DHCP network address if the Ethernet adapter selected for automatic bridging is not the correct adapter. Although VMware Player does not have a menu option to configure virtual networks, the network configuration can be viewed and modified using the Virtual Network Configuration application.
Page 10
EMEA emea_support@arubanetworks.com WSIRT Email wsirt@arubanetworks.com Email details of any security problem found in any Aruba product. | Release Overview ClearPass Guest 3.9.1 | Release Note...
Chapter 2 What’s New in This Release This chapter provides a brief summary of the new features in this release. Introducing ClearPass Guest and ClearPass Onboard With the 3.9 release, we are proud to introduce the integration of Amigopod with Aruba Networks’ QuickConnect and the ClearPass Policy Manager platform.
Plugins Renamed As part of the ClearPass platform rollout, several plugins have been renamed, as shown in Table 3. To view the list of available plugins, go to Administrator > Plugin Manager > Manage Plugins. (2049) Table 3 Plugins Renamed in ClearPass Guest Rollout Original Plugin Name New Plugin Name Aruba Amigopod Skin...
Configurable Page Elements From the Customize Forms and Views page, you can now customize the page title, header HTML, and footer HTML for many of the application’s forms and views, including the Create Guest Account form, Edit Guest Accounts view, and others. These options are in the new Page Properties area at the bottom of the Edit Properties form.
Command line interface (CLI) default reset password—When using the CLI option “Reset web password for admin to default”, the password is now reset to admin instead of amigopod. Application plugins—Many plugin names are updated. These are described in Plugins Renamed in this ...
Guest Management Single Password for Multiple Accounts Supported Support was added for the password field on the Create Multiple Guest Accounts form (create_multi). After you customize this form to include the password field, you can create multiple accounts that have the same password.
Page 16
4. In the User Interface row, choose Password text field from the drop-down list. The Field Required check box should now be automatically marked, and the Validator field should be set to IsNonEmpty. 5. Click Save Changes. On the Customize Form Fields view, the password field is now included and can be edited.
Sponsor Confirmation for Role Selection The sponsored self-registration workflow now allows the sponsor to choose the role for the user account at the time the sponsor approves the self-registered account. (2151) To use this feature: 1. Go to Customization > Guest Self-Registration, click the Guest Self-Registration row, then click its Edit link.
5. In the Role Override row, choose (Prompt) from the drop-down list. 6. Complete the rest of the form, then click Save Changes. You are returned to the Customize Guest Registration diagram. Click the Launch this guest registration page link at the upper left to preview. The Guest Registration login page is displayed as the guest would see it.
2. To configure MAC device caching, mark the Enabled check box. The form expands to include options for the role override, expiration, and device limit settings. Onboard (Mobile Device Provisioning Services) Mobile Device Provisioning Services (MDPS) is now ClearPass Onboard Mobile Device Provisioning Services has merged with QuickConnect and is now called ClearPass Onboard.
Device Enrollment Support Additional device enrollment support was implemented for the QuickConnect Enterprise product. (2004) Operating Systems Support As part of the merge with QuickConnect and support for all device types in ClearPass Onboard, the MDPS Wi-Fi settings Proxy Username and Proxy Password are no longer necessary and have been removed. Any field or section of a form that is applicable to only a subset of devices is clearly identified in the application.
3. To include the trust chain in a certificate bundle that can be imported as the server certificate in ClearPass Policy Manager, mark the Include certificate trust chain check box, then click the Export Certificate button. Certificate Bundle Downloads You can now download the root CA certificate together with any intermediate certificates as a bundle. (2287) To use this feature: 1.
5. In the Trusted Certificate drop-down list, choose the certificate you want to use. Tag for Username Included in Device Information The “Owner” tag is now included in the Onboard device information that is sent to ClearPass Policy Manager when a device is provisioned. This tag contains the username of the person who enrolled the device.
Extra Spaces Trimmed from Values on Web Login Leading and trailing spaces are now automatically removed from all values submitted on the Web login and account setup pages. This prevents issues where a login attempt would fail if the user had entered extra spaces in a field—for example, following a username or email address.
SMTP Services Email Format Cleanup Supported The email and sponsor_email fields were updated to remove display and other formatting passed with the email address by some email clients. Now when an address is passed by applications such as Outlook or Mail.app in a format such as mailto: Alice Pleasance Liddel <alice@wonderland.org>, the extraneous elements are stripped away and the format is converted to the plain email address, alice@wonderland.org.
Chapter 3 Fixed Issues The following issues were fixed in this release. Administrator DNS Server Configuration Bug ID Description 2277 Corrected an issue where, under certain conditions, manually configured DNS servers could be omitted from the system's DNS configuration. Network Settings Issue on Chrome Browser Bug ID Description 1588...
Customization Custom Field Creation Bug ID Description 2172 Corrected an issue where a new custom field could be created with the same name as an existing field and the existing field would be overwritten. A new field is now validated for a unique name and cannot overwrite an existing field.
Out-of-Memory Error During Plugin Update Bug ID Description 2350 Corrected an issue where updating plugins on a system that had numerous guest self-registration forms had caused an out-of-memory condition. High Availability Services Domain Join and Leave Operations Bug ID Description 2169 Removed the ability to join or leave the Active Directory domain when a node is part of a High Availability cluster.
“Undefined Index” PHP Message Bug ID Description 2332 Corrected an issue where a PHP message had referred to “Undefined index: P27” (and similar numbers) was sometimes logged during a plugin update. These messages were benign and did not indicate the presence of a problem.
“Does Not Have Valid Fingerprint” Error Bug ID Description 2368 Corrected an issue where, if Onboard was configured to use the Intermediate CA mode, using the “Reset to Factory Defaults” option to delete all Onboard certificates would sometimes generate the message “Internal error: the certificate with ID ...
Operating System Kernel Package Security Updates Bug ID Description 2075 The Linux kernel is now updated with security fixes from RHSA-2012:0007. For more information on the issues addressed by this update, see https://rhn.redhat.com/errata/RHSA-2012-0007.html. The kernel packages contain the Linux kernel, the core of any Linux operating system. 2157 The Linux kernel is now updated with security fixes from RHSA-2012:0107.
RADIUS Services Active Sessions Username Display and Disconnect Issues Bug ID Description 2197 Corrected an issue where Active Directory user accounts authenticated by RADIUS Services were displayed in the Active Sessions list view with a double backslash separating the domain name and the username.
Chapter 4 Known Issues The following are known issues and caveats. Applicable bug IDs and workarounds are included when possible. General Bug ID Description 1956 Connecting multiple network adapters to the same physical network, or having the same subnet 1973 assigned to multiple network adapters is not recommended.
Chapter 5 Upgrade Procedure This chapter contains information and procedures for successfully updating to this software release as well as upgrading the appliance. The upgrade procedure and requirements are the same as they were in the 3.7 release. To ensure a successful upgrade, read the contents in this chapter completely before upgrading.
Figure 1 Increasing the web application's memory limit Configuration Backup Perform a complete configuration backup and virtual machine snapshot (if applicable) before upgrading your software. The configuration backup and virtual machine snapshot will provide a restore point in the event restoring is required. Navigate to Administrator >...
Figure 3 A virtual machine snapshot prior to update. Enter the name and date of this snapshot, then click “OK” (see Figure Figure 4 Take Virtual Machine Snapshot dialog To free space on the VMware host, you can remove this snapshot after a successful upgrade. Maintaining multiple snapshots may reduce performance of the virtual machine.
4. Restart your system services or reboot the server before your software upgrade takes effect. When upgrading a High Availability cluster, the cluster must be destroyed prior to updating any plugins. Repeat the plugin update on both nodes of the cluster, and rebuild the cluster after the software update has been completed successfully.
Need help?
Do you have a question about the PowerConnect W Clearpass 100 Software and is the answer not in the manual?
Questions and answers