User:Q9f/IWD 8021x Authentication

The following works with CCC and C-Base 8021X authentication WiFi services.

First, you'll need to get the root certificate, e.g., the ISRG Root X1 from letsencrypt:

# curl https://letsencrypt.org/certs/isrgrootx1.pem -o /etc/ssl/misc/isrgrootx1.pem

Adapt the following config in /var/lib/iwd/ using the WiFi SSID as name, e.g. ssid.8021x

[Security]
EAP-Method=PEAP
EAP-Identity=$id                    # your ID
EAP-Phase2-Method=MSCHAPV2
EAP-PEAP-Phase2-Method=MSCHAPV2
EAP-PEAP-CACert=/etc/ssl/misc/isrgrootx1.pem
EAP-PEAP-ServerDomainMask=radius.cbrp3.c-base.org
EAP-PEAP-Phase2-Identity=$id        # your ID
EAP-PEAP-Phase2-Password=$password  # your password

[Settings]
AutoConnect=true

To connect, run:

$ iwctl station wlan0 connect ssid

Reference: