UPDATE ......From Tuesday 8 April 2025 we have changed the way that Single Sign-on works on this wiki. Please see here for more information:
Update
...
# the certificates themselves need to be uploaded in the web interface (Maintenance -> Certificates -> Upload -> Client/Trusted CA)
wlan cert-assignment-profile
pki-cert-assign application radsec cert-type ClientCert certname RADIUS-TLS-Cert # "RADIUS-TLS-Cert" is the friendly name given to the client certificate during upload
pki-cert-assign application radsec cert-type TrustedCA certname eduPKI-Root # "eduPKI-Root" is the friendly name given to the Trusted CA certificate during upload
...