Cisco 7925G Deployment Manual page 23

EAP-TLS may also require a user account to be created on the authentication server matching the common name of the
certificate imported into the Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G.
It is recommended to use a complex password for this user account and that EAP-TLS is the only EAP type enabled on the
RADIUS server.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Deployment Guide
23