Example profile to use machine certificates to authenticate to WPA2-Ent

com.example.wireless_wpa2.mobileconfig

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
        <dict>
                <key>PayloadIdentifier</key>
                <string>com.example</string>
                <key>PayloadRemovalDisallowed</key>
                <false/>
                <key>PayloadScope</key>
                <string>System</string>
                <key>PayloadType</key>
                <string>Configuration</string>
                <key>PayloadUUID</key>
                <string>5B2320E7-7032-47DB-A645-0AB3F613E332</string>
                <key>PayloadOrganization</key>
                <string>Pretend Co</string>
                <key>PayloadVersion</key>
                <integer>1</integer>
                <key>PayloadDisplayName</key>
                <string>WPA2 Wireless</string>
                <key>PayloadContent</key>
                <array>
                        <dict>
                                <key>PayloadType</key>
                                <string>com.apple.ADCertificate.managed</string>
                                <key>PayloadVersion</key>
                                <integer>1</integer>
                                <key>PayloadIdentifier</key>
                                <string>com.example.adcert.1231DF2B-E588-447F-BCC6-563B7B9BF4E4</string>
                                <key>PayloadUUID</key>
                                <string>1231DF2B-E588-447F-BCC6-563B7B9BF4E4</string>
                                <key>PayloadEnabled</key>
                                <true/>
                                <key>PayloadDisplayName</key>
                                <string>AD Certificate</string>
                                <key>CertTemplate</key>
                                <string>AppleMachine</string>
                                <key>CertificateAcquisitionMechanism</key>
                                <string>RPC</string>
                                <key>PromptForCredentials</key>
                                <false/>
                                <key>Description</key>
                                <string>Pretend Co Certificate Authority</string>
                                <key>CertServer</key>
                                <string>ca.example.com</string>
                                <key>CertificateAuthority</key>
                                <string>Pretend Co Signing CA</string>
                        </dict>
                        <dict>
                                <key>PayloadType</key>
                                <string>com.apple.wifi.managed</string>
                                <key>PayloadVersion</key>
                                <integer>1</integer>
                                <key>PayloadIdentifier</key>
                                <string>com.example.interfaces.92D52A6B-22C7-4A84-AA09-821AD25A6A79</string>
                                <key>PayloadUUID</key>
                                <string>92D52A6B-22C7-4A84-AA09-821AD25A6A79</string>
                                <key>PayloadEnabled</key>
                                <true/>
                                <key>PayloadDisplayName</key>
                                <string>WiFi (WPA2)</string>
                                <key>HIDDEN_NETWORK</key>
                                <false/>
                                <key>AutoJoin</key>
                                <true/>
                                <key>ProxyType</key>
                                <string>None</string>
                                <key>EncryptionType</key>
                                <string>WPA</string>
                                <key>SetupModes</key>
                                <array>
                                        <string>System</string>
                                </array>
                                <key>AuthenticationMethod</key>
                                <string/>
                                <key>Interface</key>
                                <string>BuiltInWireless</string>
                                <key>SSID_STR</key>
                                <string>CHANGEME-WPA2</string>
                                <key>EAPClientConfiguration</key>
                                <dict>
                                        <key>AcceptEAPTypes</key>
                                        <array>
                                                <integer>13</integer>
                                        </array>
                                        <key>TTLSInnerAuthentication</key>
                                        <string>MSCHAPv2</string>
                                        <key>TLSTrustedServerNames</key>
                                        <array>
                                                <string>radius.example.com</string>
                                        </array>
                                        <key>TLSCertificateIsRequired</key>
                                        <true/>
                                </dict>
                                <key>PayloadCertificateUUID</key>
                                <string>1231DF2B-E588-447F-BCC6-563B7B9BF4E4</string>
                        </dict>
                </array>
        </dict>
</plist>