using NPS to setup AAA on VSZ, need to generate x.509 how?

unknown

I need help setting up NPS to work with AAA on my Ruckus Virtual Smart Zone

I have everything working up to the point i can test my AAA server using PAP

However when i got to connect to my SSID that is using my AAA server it fails to authenticate.

Is this because i don't have a x.509 cert? if i need one how do i get one hopefully not something i'd have to purchase, maybe a cert that can be made on my NPS server.

Thanks!