You need to set up HPE Aruba Networking ClearPass Policy Manager (CPPM) to provide certificate-based...

802.1X Authentication Workflow: Requires the root CA certificate of the issuing authority for the supplicants’ certificates. This ensures that the server can validate the client certificate during the EAP-TLS handshake.

Trusted CA Usage: In ClearPass, certificates with "Trusted CA" usage are used for validating client and server identities during secure authentication exchanges.

Option A: Incorrect. The "ClearPass Server certificate" is used for server-side identity verification and is not used to validate client certificates.

Option B: Incorrect. Database usage is unrelated to RADIUS/EAP or certificate validation.

Option C: Incorrect. While LDAP/AD integration supports certificate validation, this is not the primary purpose of Trusted CAs for 802.1X.

Option D: Correct. Trusted CAs for EAP are required to validate client certificates during the authentication process.

By uploading the root CA as a "Trusted CA with EAP usage," the CPPM can properly authenticate the certificates presented by the supplicants during EAP-TLS negotiations.