Certificate based Authentication

I am looking for ways that I can use my internal PKI certificates to authenticate the client radios. For example issue a server certificates to the A5 and a client certificate to the C5’s. I haven’t seen anything on the forum about ways to do this nor in any documentation. Is using Radius and eap the preferred method. I have been known to miss things like this in the past but hoping someone can shed some light for me.