RIT Linux Wiki

A collection of information on how to access university resources at RIT using Linux Operating Systems.

View on GitHub

Connecting to the RIT eduroam network under Linux - nmcli

nmcli Tutorial

This is the complete instruction list for configuring nmcli. This was tested on a clean Tails install. File location may differ across distributions. If directories don't exist, check your distribution's documentation for the correct location of the files.


The following is required to use this configuration:


All commands starting with $ can be used as your standard user. All commands using # require to be run as root, generally by preceding the command with sudo.

  1. Generate a personal certificate according to this tutorial.

  2. Grab the name of the wireless network interface that you want to use for this connection. You will need this throughout this setup process. You can list all network interfaces by running the command:

$ nmcli device show

Check the one whose GENERAL.TYPE is wifi. Most commonly, this is wlan0 or wlp5s0.

  1. Open a terminal and use nmcli to create a new wifi connection on your wireless network interface that connects to the eduroam network:
$ nmcli connection add type wifi ifname <your interface> con-name eduroamWiFi ssid eduroam
  1. Open the eduroamWiFi.nmconnection file in the editor of your choice as root. If you do not open it as root, the changes will not be saved.
# nano /etc/NetworkManager/system-connections/eduroamWiFi.nmconnection

Substitute nano for editor of choice

  1. Edit the file so that it contains the following lines. The file will contain most of these lines already. The uuid field will already be filled in, do not edit this field.
uuid=<generated UUID, don't edit this>
interface-name=<your interface>



private-key-password=<your private key password>


  1. Run the following command to activate the connection:
# nmcli conection up eduroamWiFi

This tells nmcli that you want to bring up the network using the configuration that you created in the previous step.

  1. (Optional) Test your connection by running:
$ ping

This command tests the ability to talk to the Quad9 DNS Service. If the command returns an error, then you are not connected to the eduroam network (or any other network, for that matter).


Basic troubleshooting steps can be found in the Archwiki or your distribution's documentation.