...
# the certificates themselves need to be uploaded in the web interface (Maintenance -> Certificates -> Upload -> Client/Trusted CA)
wlan cert-assignment-profile
pki-cert-assign application radsec cert-type ClientCert certname RADIUS-TLS-Cert # "RADIUS-TLS-Cert" is the friendly name given to the client certificate during upload
pki-cert-assign application radsec cert-type TrustedCA certname eduPKI-Root # "eduPKI-Root" is the friendly name given to the Trusted CA certificate during upload
...