cucm and ip phones

[Vacheslav]

Peace, I configured my ip phones to use mab, but I read that with Radius it is possible to authenticate capable ip phones with tls. 
I searched the internet on how to do it but found almost nothing.
Should I import the created self signed certificates from the freeradius server to the cucm? Or is that I have to export the cucm certificates to the cert directory of the freeradius server?
Anyone has experience in configuring cucm with dot1x?