Hi Colin,
We have got problem only on Windows client. Mobile and linux client no problem.
Herewith how to upload certifcate on controller.
Configuration > Management > Certificates > Upload:
Upload the root, intermediate and server certificate, selecting the type under "Certificate Type".
We do not installed any CA on client.