I was only able to work-around this by setting up a non-secured access point that had open firewall rules to the Call Manager servers. Then applied my configs with correct certs and WLAN settings to the phones. Seems to be rather absurd to expect all...

I have not yet connected this phone to the WLAN. I need to configure the certificates in order for the phone to connect to the AP via EAP-TLS, but the phone admin page via USB is disabled. How, can I enable the admin page without using CUCM??