Hi Mike, not sure on your question.
This a a new NAC appliance that is being deployed.
The client would like to use EAP TLS with Certificates to authentication.
For windows Laptops, I can join the domain on the LAN and have the authentication Certificate pushed/installed on the laptop from a group policy that applies to the Laptop.
The problem occurs with the Mobile devices, when they connect to the Wireless they do not have the Authentication Cert installed and also does not trust the CA.