- What This Cheat Sheet Covers
- Core ACCX Facts at a Glance
- The Seven Content Areas Every Legacy Candidate Studied
- Exam Format: The Eight-Hour Practical
- One-Page Configuration Checklist
- Troubleshooting Quick Reference
- A Focused Review Schedule
- Retirement Status and Why This Page Still Matters
- Frequently Asked Questions
- ACCX was HPE's expert-level ClearPass credential, retired from active booking after the December 2022 announcement.
- The historical practical exam ran roughly eight hours, mixing design decisions with hands-on implementation.
- Core content spanned deployment/clustering, auth sources, role mapping, guest, certificates/BYOD, posture, and integrations/troubleshooting.
- Current HPE offerings (Advanced Product Certified - ClearPass, Network Security Expert) are separate paths - don't confuse their specs with ACCX.
What This Cheat Sheet Covers
This is a one-page style reference for anyone researching the Aruba Certified ClearPass Expert (ACCX) credential - the legacy HPE/Aruba career certification built around Policy Manager, Guest, Onboard, OnGuard, and multi-server ClearPass deployments. It exists to serve people who search for old study materials, want a refresher on expert-level ClearPass skills, or need to understand where ACCX fits into HPE's certification history.
If you're building a full study plan rather than a quick reference, pair this page with the ACCX Study Guide 2026 and the ACCX Exam Domains 2026 guide, which break each content area down in more depth. For hands-on repetition against ACCX-style scenarios, you can also work through practice questions on the main practice test site.
Core ACCX Facts at a Glance
Before diving into content areas, here are the foundational facts every ACCX researcher should know cold.
| Fact | Detail |
|---|---|
| Issuing organization | Hewlett Packard Enterprise / Aruba (HPE Certification and Learning) |
| Credential tier | Expert-level, capstone of the ClearPass career track (Associate → Professional → Expert) |
| Exam format | Hands-on practical, historically around eight hours, combining design decisions with working configurations |
| Product scope | Policy Manager, Guest, Onboard, OnGuard, profiling, posture, multi-server deployments |
| Current status | Phaseout announced December 2022 as HPE expanded its Network Security certification track |
| Related current offerings | HPE Advanced Product Certified - ClearPass; HPE Aruba Networking Certified Expert - Network Security |
Key Takeaway
Treat ACCX as a fixed historical credential: its scope and format are documented, not something you register for on a rolling basis today. If you need current pricing context for related certification paths, see the ACCX Certification Cost breakdown for how legacy fee structures typically compared to other tiers.
The Seven Content Areas Every Legacy Candidate Studied
ACCX candidates weren't tested on trivia - they were expected to design and build working ClearPass environments under time pressure. The historical candidate profile centered on seven interlocking content areas. Understanding how they connect is more useful than memorizing any single fact.
1. Deployment and Clustering
Candidates needed to reason about publisher/subscriber roles, node sizing, and how a cluster behaves during failover or WAN latency between sites.
- Publisher vs. subscriber responsibilities in a multi-server cluster
- Impact of network segmentation on cluster synchronization
- Licensing and node-limit awareness across a distributed deployment
2. Authentication Sources
Expert-level work meant chaining multiple authentication sources correctly and troubleshooting when lookups failed silently.
- Active Directory, LDAP, and local repositories in a single service
- Authentication source order and its effect on role mapping
- Certificate-based authentication alongside credential-based methods
3. Role Mapping and Enforcement
This is where design skill mattered most: translating business policy into role mapping rules and enforcement profiles that actually match.
- Role mapping policies built from multiple attribute sources
- Enforcement profiles tied to VLAN, ACL, or downloadable role output
- Service rule ordering and its effect on which policy applies
4. Guest Workflows
Guest access design covers more than a splash page - it includes sponsor approval chains, self-registration, and account lifecycle rules.
- Guest account expiration, sponsor approval, and self-registration flows
- Web login pages tied to specific enforcement profiles
- Operator profile permissions for front-desk or sponsor-level access
5. Certificates and BYOD
Onboard-driven BYOD scenarios required comfort with certificate provisioning, revocation, and device-type policy differences.
- Onboard provisioning workflows and certificate templates
- Revocation handling and its downstream effect on authentication
- Device-type-specific policy branches (corporate vs. personal devices)
6. Endpoint Posture
OnGuard-based posture checks required understanding both the agent-based and agentless assessment paths.
- Posture policy design for healthy, quarantine, and remediation states
- Persistent agent vs. dissolvable agent behavior differences
- Remediation actions tied to specific posture failures
7. Integrations and Troubleshooting
The expert tier assumed candidates could diagnose failures across profiling, third-party integrations, and multi-server sync - not just configure a clean lab.
- Device profiling data sources and conflicting classification results
- Third-party integration points (firewalls, MDM, SIEM feeds)
- Log-based root-cause analysis across access tracker and event viewer
For a deeper walkthrough of how these seven areas relate to each other and where candidates historically lost the most points, see the full ACCX Exam Domains 2026 guide.
Exam Format: The Eight-Hour Practical
Unlike multiple-choice certification exams, ACCX was documented by HPE employee guidance as an extended hands-on practical - reported at roughly eight hours - where candidates made design decisions and then implemented them in a live ClearPass environment. This format is a big part of why ACCX carried "expert" weight: passing required actually building working configurations under a clock, not just recognizing correct answers.
If you're trying to gauge how demanding that format was relative to other certification styles, the How Hard Is the ACCX Exam guide walks through the difficulty profile in more detail, and ACCX Passing Score 2026 covers what "passing" meant in a practical-exam context.
One-Page Configuration Checklist
Use this as a rapid self-check before diving into deeper labs. If any line feels unfamiliar, that's your signal to go back to the corresponding content area above.
- Can you explain publisher/subscriber failover behavior without looking it up?
- Can you build a service with two authentication sources and correct fallback order?
- Can you trace how a role mapping rule feeds into an enforcement profile end to end?
- Can you configure a sponsor-approved guest workflow with account expiration?
- Can you walk through an Onboard certificate provisioning flow for a personal device?
- Can you distinguish persistent-agent posture checks from agentless equivalents?
- Can you name at least three data sources ClearPass uses for device profiling?
Key Takeaway
Every checklist item above maps to something a real network security or NAC engineer role expects today, even outside a formal ACCX booking. If you're weighing whether this depth of knowledge is worth pursuing for career purposes, Is the ACCX Certification Worth It? covers the ROI angle in more depth.
Troubleshooting Quick Reference
Troubleshooting was folded into nearly every part of the ACCX practical rather than isolated as its own section. Here's a compressed reference for the most common failure patterns candidates needed to diagnose quickly.
| Symptom | Likely Cause to Check First |
|---|---|
| Client authenticates but gets wrong role | Role mapping rule order or conflicting attribute sources |
| Guest self-registration succeeds but no network access | Enforcement profile mismatch on the guest service |
| Device fails posture but appears healthy | Agent type mismatch (persistent vs. dissolvable) or stale posture token |
| Cluster nodes show sync errors | Publisher/subscriber connectivity or certificate trust issues |
| Onboard device can't complete provisioning | Certificate template scope or revocation list conflict |
| Profiling misclassifies a device type | Conflicting data sources (DHCP fingerprint vs. active scan) |
This kind of scenario-based reasoning is exactly what separates rote memorization from expert-level readiness - and it's the same style of thinking tested through scenario questions on the practice test platform.
A Focused Review Schedule
If you're using this cheat sheet as a refresher rather than starting from zero, a short, focused schedule works better than a generic multi-month plan. Sequence the content areas so that foundational topics come first and troubleshooting - which depends on everything else - comes last.
Deployment, Clustering, Authentication Sources
- Rebuild a small multi-server lab mentally or hands-on
- Chain two authentication sources in a single service
Role Mapping, Enforcement, Guest Workflows
- Trace attribute flow from source to enforcement profile
- Build a sponsor-approval guest flow end to end
Certificates/BYOD and Endpoint Posture
- Walk an Onboard provisioning flow start to finish
- Compare agent-based and agentless posture outcomes
Integrations and Troubleshooting
- Run scenario-based troubleshooting drills across all prior topics
- Review logs and access tracker entries for common failure signatures
Notice this schedule doesn't rely on generic techniques for their own sake - each week is anchored to a specific ACCX content area building on the one before it. For a longer-form version of this approach with more day-by-day detail, see the ACCX Study Guide 2026.
Retirement Status and Why This Page Still Matters
HPE announced the phaseout of the ClearPass Associate, Professional, and Expert certifications in December 2022 as the company expanded its Network Security certification track. That means ACCX is no longer an active, bookable exam path - it has been succeeded by offerings like the HPE Advanced Product Certified - ClearPass credential and the HPE Aruba Networking Certified Expert - Network Security track, along with skills-focused training such as the ClearPass Advanced Configuration course, which HPE explicitly positions as training rather than certification preparation.
Despite that, ACCX remains a meaningful reference point for two groups: professionals who earned it historically and want a refresher on the skills it covered, and newer engineers researching what "expert-level ClearPass" competency actually looked like before the track evolved. This page - along with ACCX Requirements 2026 and ACCX Exam Dates 2026 - is maintained as legacy reference and skills-training material, not as a current registration offer.
If you're mapping how this history connects to hiring, the roles that historically valued ACCX-level ClearPass expertise - NAC engineers, network security specialists, and wireless/security architects - are covered in more depth in ACCX Jobs, while broader definitional questions are addressed in What Is ACCX? and ACCX Meaning.
Frequently Asked Questions
No. HPE announced the phaseout of the ClearPass Associate, Professional, and Expert certifications in December 2022 as its Network Security certification track expanded. This page treats ACCX as legacy reference and skills-training content, not a current booking offer.
Historical HPE employee guidance describes ACCX as an eight-hour hands-on practical requiring both design decisions and working implementations across Policy Manager, Guest, Onboard, OnGuard, profiling, posture, and multi-server deployments - not a question-bank format.
Deployment and clustering, authentication sources, role mapping and enforcement, guest workflows, certificates and BYOD, endpoint posture, and integrations/troubleshooting - the same seven areas detailed earlier in this cheat sheet.
If you need a current, bookable credential, look into the HPE Advanced Product Certified - ClearPass certification or the HPE Aruba Networking Certified Expert - Network Security track, which are distinct programs with their own blueprints separate from legacy ACCX.
You can work through scenario-based practice questions modeled on ACCX content areas at the main practice test site, then cross-reference the detailed breakdown in the ACCX Exam Domains 2026 guide.