This describes how to configure the WiFi interface.
In both cases, SCEP and files from UMS, the device needs to have a working Ethernet or WiFi connection to the SCEP server or the UMS first, so that it can fetch the necessary certificates, before it can connect to the target WiFi.
Using SCEP (NDES)
In Setup go to Network > LAN Interfaces > Wireless.
Check Activate Wireless Interface.
Go to Default WiFi-network.
Select Enable WPA Encryption.
Enter the Wireless Network Name (SSID).
Select WPA Enterprise or WPA2 Enterprise according to your preferences.
Set EAP Type to TLS
or set EAP Type to PEAP and Auth Method to TLS.
IGEL OS supports both EAP-TLS and PEAP-EAP-TLS. Choose one that is supported by your infrastructure.