Radius server and certificate authentication

RouterOS Wireless Networking
1

i have managed to setup EAP-TLS authentication on radius server on Mikrotik
my goal is to authenticate the school devices via certificate without needs to login into Wi-Fi
we have about 200 devices “tablet” now to achieve this
do i need certification for each device ?
can i have something like one certificate for all devices?
each certificate must have a user in user manager ?

i really thankful for whoever take a look and help, thanks

2

It is your own choice. You have one issuer certificate, and you can have many client certificates. Or you can all use a single client certificate.

(in fact you can also skip client certificates and use username/password and only have the issuer and server certificate)