Set up Wi-Fi on Linux – Ubuntu, NetworkManager, wpa_supplicant

When using a GUI, it is likely that you use NetworkManager for network configuration.

1. Run command nm-connection-editor (Advanced Network Configuration).
2. Expand the Wi-Fi category and look if you already have an existing Sincoolka profile - it might be a good idea to remove it with a - button (minus sign) if it does not work.
   
3. Then, click the + button (plus sign) in the bottom toolbar.
4. In the Choose a Connection Type window, pick Wi-Fi from the list. Then click the Create… button
   
5. A window for describing network configuration will open.
   • Fill out the name of the profile (can be anything, e.g. Sincoolka).
   • Switch to the Wi-Fi tab and fill out these - SSID: Sincoolka or Sincoolka 5G. From the Devices list, choose your Wi-Fi adapter.
     
   • Switch to the Wi-Fi Security tab and set up the following:
     • Security: WPA2-Enterprise
     • Authentication: Tunneled TLS
     • Anonymous identity: anonymous@sin.cvut.cz
     • Domain: radius.sin.cvut.cz
     • CA certificate: download and save it (download format PEM)
     • Inner authentication: PAP
     • Username: use your SIN username or SIN email (find it after logging in to SINIS)
     • Password: the same as for your SINIS login.
       
   • Confirm your settings by pushing the Save button.

Now, your connection should be all set for secure Wi-Fi browsing.

WPA Supplicant is an utility which enables WPA security support for Wi-Fi in Linux. NetworkManager uses wpa_supplicant internally.

In case you want to set up a wpa_supplicant profile manually, we have prepared a Sincoolka network definition below.

Please download the proper **CA certificate** first and save it. You will enter the path to this file in the wpa_supplicant configuration profile.

wpa_supplicant.conf

network={
    ssid="Sincoolka"  # or Sincoolka 5G
    scan_ssid=1
    key_mgmt=WPA-EAP
    eap=TTLS
    # path to the downloaded CA certificate
    ca_cert="/etc/cert/sin-wifi-ca.pem"
    domain_match="radius.sin.cvut.cz"
    phase2="auth=PAP"
    pairwise=CCMP
    group=CCMP
 
    # Your credentials
    identity="jiri.novak@sin.cvut.cz"
    anonymous_identity="anonymous@sin.cvut.cz"
    password="YourStr0ngPa$$word"
}