Security

 View Only

  • 1.  Any compelling reasons to move to 6.12?

    Posted Aug 13, 2025 05:49 PM

    I am working with a customer on an upgrade of the ClearPass server. We are currently at 6.11.8.258602 and are contemplating upgrading to the latest 6.11.12 release or to 6.12.5.
    There are some features in 6.12 worth potentially such as TLSv1.3 but further more I am not sure if it is worth going to 6.12
    Which version would be recommended, neither releases have an end date but I am aware that SSR releases have a shorter lifespan
    Features we want need are TEAP authentication, Downloadable User Roles, and integration with third party MDMs and Firewalls. 
    Should we just stick with 6.11.x or are there other compelling reasons to go for 6.12.x?

    Thanks



    ------------------------------
    Martijn van Overbeek
    Architect, Netcraftsmen a BlueAlly Company
    ------------------------------


  • 2.  RE: Any compelling reasons to move to 6.12?

    Posted Aug 13, 2025 07:28 PM

    you  can check the new features that are part of 6.12 release notes, but if you are using Entra/intune configuration then 6.12 has great improvements in the Entra integration that provides flexibility and full access to the Graph-API.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: Any compelling reasons to move to 6.12?

    Posted Aug 14, 2025 04:51 AM

    A patch upgrade within the 6.11 version would have less changes, as there are only bug fixes and no new features. From a 'risk perspective' patch upgrades feel less impactful than major version upgrade.

    For a new installation, or upgrade from 6.9/6.10, I would go for 6.12 at this moment because of the newer features (TLSv1.3), and even more if you use Entra ID integration as mentioned as well; but apparently as you are on 6.11 now, all seems working fine.

    On the LSR/SSR status, my personal feeling is (so no official statement) that the remaining lifetime of ClearPass 6.11 and 6.12 is roughly the same, and stability seems good on either version.

    For me there would not be a reason not to go to 6.12, if you can use the new features, and read the release notes on possible breaking changes.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 4.  RE: Any compelling reasons to move to 6.12?

    Posted Aug 14, 2025 08:23 AM

    Thanks Herman and Ariyap.

    This customer had some entitlement issues and was unable to upgrade their current 6.11 machine and we were forced to build a new machine buy new licenses. The old machine did have issues with TEAP and the Downloadable User Role. At least DUR I had running successfully on 6.12.

    Not sure if that makes a difference but in case it does, I look forward to any other feedback. If none apply then I will stick with 6.11.

    Thanks again,



    ------------------------------
    Martijn van Overbeek
    Architect, Netcraftsmen a BlueAlly Company
    ------------------------------

    Original Message


Related Content