- Understanding ACCX's Legacy Status in 2026
- The Content Areas That Defined ACCX
- Deployment and Clustering
- Authentication Sources and Role Mapping
- Guest Workflows, Certificates, and BYOD
- Endpoint Posture and Profiling
- Integrations and Troubleshooting
- The Eight-Hour Practical Format
- Mapping a Study Timeline to the Domains
- Who Actually Uses This Skill Set
- Frequently Asked Questions
- ACCX was an expert-level ClearPass credential from HPE/Aruba, phased out starting December 2022.
- The historical practical exam ran roughly eight hours and required working, deployed configurations, not just multiple-choice answers.
- Content areas spanned deployment/clustering, authentication sources, role mapping, guest and Onboard workflows, posture, profiling, and troubleshooting.
- Multi-server Policy Manager clusters and OnGuard posture checks were treated as core candidate skills, not optional extras.
Understanding ACCX's Legacy Status in 2026
Before diving into content areas, it's worth being direct about where the Aruba Certified ClearPass Expert (ACCX) credential stands. HPE announced the phaseout of the ClearPass Associate, Professional, and Expert certifications in December 2022 as the broader Network Security certification track expanded. That means ACCX is no longer an active, bookable exam in the way many candidates assume when they search for it.
So why does a guide to "ACCX Exam Domains" still matter in 2026? Because the underlying skill set - deploying and managing Aruba ClearPass Policy Manager at an expert level - hasn't gone anywhere. Organizations still run ClearPass in production, hiring managers still reference ACCX on resumes, and engineers preparing for current HPE offerings like the HPE Advanced Product Certified - ClearPass track or the HPE Aruba Networking Certified Expert - Network Security path benefit from understanding what expert-level ClearPass competency actually looked like under the original ACCX framework.
This article treats ACCX as legacy certification content: a historically accurate map of what the credential covered, useful for skills training, resume context, and technical grounding rather than as a current registration offer. For a broader orientation to the credential itself, see What Is ACCX? and ACCX Meaning.
The Content Areas That Defined ACCX
Historical HPE employee guidance and airheads community discussion describe the ACCX candidate profile as someone comfortable making design decisions and building working implementations across the full ClearPass product family: Policy Manager, Guest, Onboard, OnGuard, profiling, posture, and multi-server deployments. Rather than a single narrow topic list, ACCX content spanned seven interconnected areas:
- Deployment architecture and clustering
- Authentication sources and role mapping
- Enforcement policy design
- Guest workflows
- Certificates and BYOD onboarding
- Endpoint posture and profiling
- Integrations and troubleshooting
Each of these areas required not just conceptual knowledge but the ability to build and validate a functioning configuration. That distinction - theory versus working implementation - is the single most important thing to understand about how ACCX content was structured. If you want a condensed reference version of these areas, the ACCX Cheat Sheet consolidates the must-know facts in one page.
Why "Content Areas" Rather Than Weighted Domains
Unlike many multiple-choice certifications that publish explicit domain weightings and percentage breakdowns, ACCX's practical format meant candidates were evaluated on whether their deployment worked end-to-end. Treat the areas below as interdependent skill clusters rather than isolated exam sections you can study in strict percentage order.
Deployment and Clustering
Multi-server ClearPass deployments sat at the foundation of the ACCX candidate profile. This meant understanding how Policy Manager nodes communicate in a cluster, how publisher and subscriber roles function, and how to plan for redundancy and load distribution across sites.
Deployment and Clustering
Candidates needed to understand how ClearPass clusters are architected and kept in sync.
- Publisher/subscriber node roles and database replication behavior
- Sizing decisions for multi-server deployments across distributed sites
- Failover planning and what happens to policy enforcement during node loss
- Configuration synchronization and version consistency across a cluster
Because the exam was hands-on rather than purely theoretical, candidates were expected to actually stand up a cluster configuration and demonstrate that policy changes propagated correctly - not just describe the architecture on paper.
Authentication Sources and Role Mapping
ClearPass's value comes from its ability to pull identity information from multiple sources and translate that into consistent network access decisions. ACCX content treated authentication source configuration and role mapping as inseparable skills.
Authentication Sources and Role Mapping
Expert-level candidates needed fluency across directory integrations and the logic that converts identity attributes into roles.
- Configuring Active Directory, LDAP, and local authentication sources
- Building role mapping policies from attribute conditions
- Understanding precedence when multiple sources or rules could apply
- Troubleshooting authentication failures traced back to source misconfiguration
Enforcement policy design builds directly on this foundation - once a role is mapped, ClearPass needs enforcement profiles that translate that role into VLANs, ACLs, or downloadable policies applied at the switch or controller. Candidates who treated authentication and enforcement as separate silos typically struggled with the scenario-based nature of the practical exam.
Guest Workflows, Certificates, and BYOD
Guest access and device onboarding formed another major cluster of ACCX content. This area combined ClearPass Guest's self-registration and sponsor-approval workflows with Onboard's certificate provisioning for BYOD devices.
Guest Workflows and BYOD Onboarding
Candidates were expected to design and configure workflows end users would actually interact with.
- Guest self-registration pages and sponsor approval chains
- Onboard certificate issuance and device provisioning for personal devices
- Certificate authority configuration and trust chain validation
- Balancing usability against security requirements in guest network design
Key Takeaway
Guest and Onboard configurations were tested as working systems - a candidate had to prove a device could actually onboard and receive the correct network access, not just describe the theoretical workflow.
Endpoint Posture and Profiling
OnGuard-based posture assessment and endpoint profiling represented some of the more technically demanding ACCX content. This is where candidates had to demonstrate understanding of how ClearPass identifies device types and evaluates their health before granting network access.
Posture and Profiling
This area tested device fingerprinting accuracy and health-check logic together.
- Profiling techniques used to classify device types on the network
- OnGuard posture checks and remediation workflows for non-compliant endpoints
- Handling profiling ambiguity when a device doesn't cleanly match known fingerprints
- Tying posture results back into role mapping and enforcement decisions
Because posture and profiling feed directly into enforcement, mistakes here tended to cascade - a misclassified device could receive the wrong role, and a misconfigured posture policy could block legitimate endpoints entirely. Candidates preparing for this material benefit from working through realistic troubleshooting scenarios rather than memorizing definitions, which is the approach covered in the ACCX Study Guide.
Integrations and Troubleshooting
The final major content area tied everything together: integrations with external systems and the diagnostic skill to trace a failure back to its root cause across a multi-component deployment.
Integrations and Troubleshooting
Expert candidates needed to reason across the entire ClearPass stack when something broke.
- Integrating ClearPass with switches, controllers, and third-party systems
- Reading access tracker logs to isolate authentication, posture, or enforcement failures
- Distinguishing configuration errors from network-path or certificate trust issues
- Validating fixes across clustered nodes rather than a single server
This troubleshooting emphasis is arguably what separated ACCX from lower-tier ClearPass credentials - it wasn't enough to build a correct configuration once; candidates had to demonstrate they could diagnose and repair a broken one under time pressure.
The Eight-Hour Practical Format
Unlike typical multiple-choice certification exams, historical HPE employee guidance describes the ACCX assessment as an eight-hour hands-on practical. Candidates made design decisions and built working implementations live, rather than selecting answers from a question bank.
| Aspect | ACCX Practical Format |
|---|---|
| Duration | Roughly eight hours, hands-on |
| Format | Design decisions plus working configuration builds |
| Products in scope | Policy Manager, Guest, Onboard, OnGuard, profiling, posture |
| Deployment context | Multi-server / clustered environments |
| Evaluation basis | Functioning implementation, not answer selection |
This format explains why generic exam-cram tactics never fit ACCX preparation well. Understanding how difficult this exam actually was compared to other Aruba credentials is covered in more depth in How Hard Is the ACCX Exam?, and readers curious about the score threshold historically associated with practical assessments like this can review ACCX Passing Score.
Mapping a Study Timeline to the Domains
Given the interdependence of ACCX's content areas, a sequential study approach works better than jumping randomly between topics. The sequence below follows the natural dependency chain: identity sources feed role mapping, role mapping feeds enforcement, and enforcement is what guest, posture, and profiling workflows ultimately rely on.
Deployment and Clustering Foundations
- Build a multi-node lab and confirm publisher/subscriber sync
- Practice failover scenarios and observe enforcement behavior during node loss
Authentication Sources and Role Mapping
- Connect AD/LDAP sources and build layered role mapping rules
- Test edge cases where multiple rules could match a single user
Guest, Onboard, and Certificates
- Configure a full guest self-registration and sponsor approval chain
- Provision a BYOD device through Onboard and verify certificate trust
Posture, Profiling, and Troubleshooting
- Run OnGuard posture checks against compliant and non-compliant endpoints
- Deliberately break a configuration and practice access tracker diagnosis
This timeline is intentionally scoped to ACCX's specific content areas rather than a generic study calendar - the goal is to end each week having built and tested something, since that's how the original practical exam evaluated candidates. For additional context on how to structure preparation around eligibility and background expectations, see ACCX Requirements.
Who Actually Uses This Skill Set
Even as a legacy credential, ACCX-level ClearPass expertise remains relevant to specific hiring contexts. Network security engineers, NAC administrators, and consultants working with organizations that already run ClearPass in production still need the deployment, authentication, guest, posture, and troubleshooting fluency this credential represented.
If you're evaluating whether pursuing this skill set - or referencing it on a resume - makes sense for your career path, the analysis in Is the ACCX Certification Worth It? and the role-specific context in ACCX Jobs are useful starting points. For structured practice on the exact content areas covered here, the question sets on the main practice test platform are organized around these same domains.
Those newer to the topic entirely may want to start with foundational orientation before working through domain-level detail - What Is ACCX Certification? and What Does ACCX Stand For? both cover the basics without assuming prior ClearPass experience. When you're ready to move from orientation to structured practice, return to the practice test homepage to work through scenario-based questions modeled on these content areas.
Key Takeaway
Because ACCX is retired as a bookable exam, focus preparation time on demonstrable ClearPass skills across these content areas rather than searching for current registration or fee details - none apply to this legacy credential.
Frequently Asked Questions
ACCX was phased out starting in December 2022 as HPE expanded its Network Security certification track, so there is no active, official exam blueprint being maintained. The content areas described here come from historical HPE employee guidance and community discussion about what the practical exam covered.
Historical descriptions characterize it as an eight-hour hands-on practical involving design decisions and working implementations across Policy Manager, Guest, Onboard, OnGuard, profiling, and posture - not a standard multiple-choice format.
There is conceptual overlap since both involve ClearPass administration, but current offerings like HPE Advanced Product Certified - ClearPass and HPE Aruba Networking Certified Expert - Network Security are distinct, active credentials with their own specifications. They should not be assumed to mirror ACCX's original content areas.
Deployment and clustering fundamentals are the logical starting point, since authentication sources, role mapping, and enforcement all depend on understanding how a multi-server Policy Manager environment behaves.
The ACCX Study Guide outlines a preparation approach, the ACCX Cheat Sheet offers a condensed reference, and the practice test platform provides scenario-based questions modeled on these same content areas.