A hospital tablet is lost. It still has a device certificate the clinical WLAN trusts. Which system should retire that tablet so the certificate is no longer a valid identity?
Select an answer to reveal the explanation.
Short Explanation
The certificate lives with the tablet, and the tablet was enrolled by your device manager. Retire it there so the certificate stops being a valid identity. A channel change does not revoke a certificate.
Full Explanation
A device certificate is issued and revoked by the mobile device manager that enrolled the tablet. Retiring the lost tablet there is what makes that certificate an invalid identity for the clinical WLAN. An RF profile sets radio parameters. Changing a channel does not revoke a certificate. The guest portal authenticates guests. It does not retire employee device certificates at a splash page. A noise-floor alarm describes the channel. It does not disable certificates while the floor is noisy. Revocation has to be something the authentication path will notice. A radio change never reaches the certificate that was issued to the tablet. Exam caveat: revocation still has to be visible to the authentication path, through a fresh check or a list the server consults. Retiring the tablet in a console nobody queries will not stop a still-trusted certificate. Operational check: revoke a test tablet, attempt the clinical WLAN, and confirm the authentication fails because the certificate is revoked.