I think that KB is a little outdated. Just copy or email your .pfx to your device and install it. Add a connection to Pulse, choose certificate auth, and choose the newly installed certificate from your cert store.
We use Android 4, 5, and 6 with this method without issue.