Firepass with Client Certificate Passwordless Authentication using MS CA

Full recap - have configured local CA on Firepass for testing.

 

This works great but doesn't scale, is a potential admin nightmare and forces duplication across firepasses at different sites.

 

We have a fully functional MS CA (Win2k8) and have deployed using SHA1 only (something F5 support says is required with Firepass 7)

 

Generate cert, load on iOS device, start Edge client but it says no certificates are found??

 

I suspect there is something about the MS format it doesn't like but I'm no CA whiz so wondering if anyone else has successfully configured this and would be willing to share their findings??

 

 

Thank you in advance!