Ok the problem is that opnsense does not have tls-crypt as a feature listed in the GUI. What it shows for TLS settings is TLS-auth, which must be what the standard air entry protocol is.
The fix, is also what someone here found worked for a DD-WRT.
1. Disable TLS authentication (Uncheck the box)
2. Under "Advanced"
<tls-crypt>
[your tls 1.2 key here]
</tls-crypt>
and then add all the other client config stuff like usual
Its being worked on by the opnsense team but is slated to show up in the GUI for a later release.