Cisco Unified Wireless IP Phone 7925G Series Deployment Guide 18
EAP-TLS provides excellent security, but requires client certificate management.
Ensure that “Certificate CN Comparison” is selected when enabling EAP-TLS.
EAP-TLS also requires that a user account be created on the authentication server matching the common name of the certificate
imported into the Cisco Unified Wireless IP Phone 7925G Series.
It is recommended to use a complex password for this user account.