you need to add the trusted CAs in the store, in that case , if two diff. clients with two diff. CAs issued certs , can authenticate themselves.

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_010001000.html#ID42