login to domain with EAP-TLS

hi everyone, how to make XP make connection to the ap so it can logon to the samba pdc? it seems that xp make wireless connection after a user login to the box if using eap-tls. is there a way to solve this? I read about something using machine auth or machine certificate. thanks