Set up Wi-Fi on Linux - Ubuntu, NetworkManager, wpa_supplicant

When using a GUI, it is likely that you use NetworkManager for network configuration.

1. Run command nm-connection-editor (Advanced Network Configuration).
2. Expand the Wi-Fi category and look if you already have an existing Sincoolka profile - it might be a good idea to remove it with a - button (minus sign) if it does not work.
   
3. Then, click the + button (plus sign) in the bottom toolbar.
4. In the Choose a Connection Type window, pick Wi-Fi from the list. Then click the Create… button
   
5. A window for describing network configuration will open.
   • Fill out the name of the profile (can be anything, e.g. Sincoolka).
   • Switch to the Wi-Fi tab and fill out these - SSID: Sincoolka or Sincoolka 5G. From the Devices list, choose your Wi-Fi adapter.
     
   • Switch to the Wi-Fi Security tab and set up the following:
     • Security: WPA2-Enterprise
     • Authentication: Tunneled TLS
     • Anonymous identity: anonymous@sin.cvut.cz
     • Domain: radius.sin.cvut.cz
     • CA certificate: download and save it (download format PEM)
     • Inner authentication: PAP
     • Username: use your SIN username or SIN email (find it after logging in to SINIS)
     • Password: the same as for your SINIS login.
       
   • Confirm your settings by pushing the Save button.

Now, your connection should be all set for secure Wi-Fi browsing.

WPA Supplicant is an utility which enables WPA security support for Wi-Fi in Linux. NetworkManager uses wpa_supplicant internally.

In case you want to set up a wpa_supplicant profile manually, we have prepared a Sincoolka network definition below.

Please download the proper CA certificate first (DigiCert Assured ID Root CA, PEM format) and save it. You will enter the path to this file in the wpa_supplicant configuration profile.

wpa_supplicant.conf

network={
    ssid="Sincoolka"  # or Sincoolka 5G
    scan_ssid=1
    key_mgmt=WPA-EAP
    eap=TTLS
    # path to the downloaded CA certificate
    ca_cert="/etc/cert/digicert-ca.pem"
    domain_match="radius.sin.cvut.cz"
    phase2="auth=PAP"
    pairwise=CCMP
    group=CCMP
 
    # Your credentials
    identity="jiri.novak@sin.cvut.cz"
    anonymous_identity="anonymous@sin.cvut.cz"
    password="YourStr0ngPa$$word"
}