> For the complete documentation index, see [llms.txt](https://documentation.tjhsst.edu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.tjhsst.edu/guides/linux-wifi-setup.md).

# Linux Wifi Setup

1. Connect to the FCPSonboard network
2. Open a web browser and navigate to [fcps.edu](https://fcps.edu)
3. You should be redirected to a login website
4. Accept the terms

   ![Accept Terms](/files/-LQv-SUKcurWwvcJM123)
5. Select "FCPS Staff and Students"

   a. You could also sign in as a guest, that just changes the password you use in a later step.

   ![Select Login Category](/files/-LQv-SUMZvYtJRD3LVce)
6. Enter your FCPS Student ID and Password

   ![Enter Password](/files/-LQv-SUOwAhDDwu3tQ88)
7. Navigate to the "Other" network devices

   \--PICTURE NEEDED--
8. Download the certificates

   \--PICTURE NEEDED--
9. Now, navigate to your network manager.

   Click on the “Fairfax” wifi network in the list of networks. Enter the information in the box as shown.

   Make sure to select “TLS” as the authentication type and not “TTLS”.\
   As of somewhere around `NetworkManager` version 1.36.x (which ships by default in Ubuntu 22.04 LTS, Fedora 36, and probably some other major Linux distributions), `NetworkManager` will fail to connect if `Domain` is not properly set to `xprsscnctvm.fcps.edu` and will give **NO** helpful information about why.

![Network Manager](/files/8Vw6DOMHinmJPdyXUT4H)

1. If you are a cool person who uses `wpa_supplicant`, put this instead in your `/etc/wpa_supplicant/wpa_supplicant-<interface>.conf`

   ```
   network={
   ssid="Fairfax"
   key_mgmt=WPA-EAP
   eap=TLS
   identity="guest@fcps.edu"
   # or,
   # identity="<your-id>@byod.fcps.edu"
   ca_cert="/etc/wpa_supplicant/wifi_certs/FCPS.pem"
   client_cert="/etc/wpa_supplicant/wifi_certs/user.crt"
   private_key="/etc/wpa_supplicant/wifi_certs/user.key"
   private_key_passwd="<guest password or your own password>"
   }
   ```

   a. FCPS.pem == The first CA certificate (you don't need the websense one)

   b. user.crt == `openssl pkcs12 -in certificate.p12 -out user.crt`

   c. user.key == `certificate.p12`