So, two crucial things you will have to do:
- under Onboard> Configuration> Network Settings> Authentication, you need to make sure that under Windows Authentication, Certificate Store is set to "Machine".
- Under Onboard> Configuratoin> Network Settings> Access, you need to configure the Name Parameter (this is just a friendly name for the Profile and not the SSID), make sure security type is "Enterprise 802.1x", make sure the Security Version is WPA2 with AES, and Make sure the SSID is the network you want it to connect to.
Those are just two crucial things to do what you said, it obviously takes more to make it work, but I was just answering your question...