Skip to content

Instantly share code, notes, and snippets.

@Moelf
Last active July 25, 2024 18:06
Show Gist options
  • Save Moelf/42133bc4af69285c450ad1ebdf441ed1 to your computer and use it in GitHub Desktop.
Save Moelf/42133bc4af69285c450ad1ebdf441ed1 to your computer and use it in GitHub Desktop.
Harvard Secure and eduroam config for iwd and iwctl
[Security]
EAP-Method=TLS
EAP-Identity=<your harvard email>
EAP-TLS-CACert=/var/lib/iwd/usertrustrsacertificationauthority.cer
EAP-TLS-ClientCert=/var/lib/iwd/harvard_eduroam.p12
EAP-TLS-ClientKey=/var/lib/iwd/harvard_eduroam.p12
EAP-TLS-ClientKeyPassphrase=<your certificate password>
EAP-TLS-Phase2-Method=Tunneled-PAP
EAP-TLS-Phase2-Identity=<your harvard email>
EAP-TLS-Phase2-Password=<your harvard login password>
[Settings]
AutoConnect=true
@Moelf
Copy link
Author

Moelf commented Sep 3, 2021

As of 2024-07-22, the EAP-Method has switched from TTLS to TLS

  1. go to https://cloud.securew2.com/public/23531/Wireless_-_Harvard_Secure_and_eduroam_(TLS)/?device=User-Defined
  2. Download .p12 file and put it somewhere not under /home
  3. Download .cer certification file and put it somewhere not under /home
  4. make sure to sudo chmod 600 these two files.
  5. make sure to sudo chown root these two files.
  6. put the above content into sudoedit /var/lib/iwd/eduroam.8021x
  7. sudo chmod 600 /var/lib/iwd/eduroam.8021x
  8. sudo chown root /var/lib/iwd/eduroam.8021x

done:

systemctl restart iwd.service 
iwctl station wlan0 connect eduroam

@CodeAsm
Copy link

CodeAsm commented Sep 19, 2022

Thanks so much, this gave me enough hints to connect to my eduroam. They use PEAP here tho, but it works 😄
Ive forked your gist and hope either one of these help someone in the future

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment