You are establishing a cluster of HPE Aruba Networking ClearPass servers. (Assume that they are running version 6.9.). For which type of certificate…

When establishing a cluster of HPE Aruba Networking ClearPass servers, it is recommended to install

a CA-signed certificate for HTTPS on the Subscriber before it joins the cluster. This ensures secure

communication between the servers in the cluster and provides a trusted certificate for client

connections.

1. HTTPS Security: A CA-signed certificate for HTTPS ensures that all web-based communication to

and from the ClearPass server is encrypted and secure.

2. Cluster Communication: Secure communication between ClearPass nodes in the cluster is

essential for synchronization and data integrity.

3. Client Trust: Clients accessing the ClearPass server will trust the CA-signed certificate, avoiding

security warnings and ensuring smooth operations.

Reference: ClearPass documentation and best practices for clustering and certificate management

recommend installing CA-signed certificates for secure HTTPS communication.