Certificate Authentication on IPAD

That's not what I'm saying. Your LTM VIP needs the client SSL profile (set to ignore) and the APM access policy. The access policy needs, basically:

Start -> On-Demand Cert Auth Agent -> Allow

You can add things after the ODCA, but the above is a minimal configuration. Do not use the Client Cert Inspection agent in the VPE.

If that doesn't work, remove the ODCA and set client SSL to request/require instead. Again, do not use the Client Cert Inspection agent. The client certificate values will still be available to the access session.