FYI, I gave up on eap-tls for OS X and ios.

[John Tobin]

I am currently setup with a cisco 1282 access point running wpa2 supported by free radius under suse linux [tumble weed].
I am supporting students on window 7, [I believe I have a few win-10s] and osx, will be testing ios later this week.
The server is the CA, and for testing purposes I had setup a self signed cert, and was testing the client cert.

I could not get it to work, went through a number of different efforts with multiple tries / multiple profiles on osx sierra, and el capitan

Peap will have to do the job. that’s what is currently running.

Sincerely,
tob