Exchange iapp 1.06 - need to add client cert auth for activesync

Is there documentation on adding client certificate authentication to APM for activesync - when using the Exchang 2010-2013 iapp? I have airwatch configured to send the certificate

 

I believe I need a client ssl profile, trusted cert authority - my pki CA? Advertised cert authority - same?

 

Then will I need an irule to redirect activesync connections to a separate VIP/Access Policy? Or, can I create a branch rule based on client type?

 

Thanks!