Corporate Wireless with certificate installed on devices

I need to configure our Ruckus 3025 to serve corporate clients and am looking for a guide on how to install a certificate on the controller to verify the authenticity of the clients connecting and then to authenticate the users by their logon name, finally assigning them an IP range suitable to their division

We have one zone director and many sites - so need the remote sites to be able to break out locally for local traffic.

I am sure this is quite straightforward and there should be some deployment guides somewhere but I can find them on the main site.

Thanks

Roger