If you choose to use EAP-PEAP/MS-CHAPv2 you need 4 items:

1. A server certificate, signed by a Cert Authority "serverCA"

...not forgetting the relevant OID extensions peculiar to EAP-PEAP :-) Josh.