Network Policy Server

[Duke5A]

Greets! I'm trying to setup device certificate based authentication for iOS devices on our managed wireless network. The end goal is to have iPads automatically join a special wireless network using nothing more than a pre-installed certificate with no user credentials involved. I've already setup WCS to use on a non-production domain controller as a Radius server, and setup the wireless controller as a client in the NPS snap-in. I need help setting up the network policy to grant access as I've never done this before. Any help would be greatly appreciated! Thanks...