# WiFi Profile

{% hint style="warning" %}
We strongly recommend to **not use any spaces** or **special characters** in your **SSID**.
{% endhint %}

To configure a WiFi profile in Google Workspaces for your Chromebooks, please follow these instructions:

1. In your Google **Admin console** (at admin.google.com)  > Go to **Menu** > **Devices** > **Network** > **Create a Wi-Fi network**.
2. In the **Platform access** section, check the box for **Enabled for Chromebooks (by device)**.
3. In the **Details** section, set the following:

| Details                                    | Value                                                                                                                                                                                                                                                                                                                                                                                                                    |
| ------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Name**                                   | Your WiFi name (we recommend to match it with the SSID).                                                                                                                                                                                                                                                                                                                                                                 |
| **SSID**                                   | Your SSID.                                                                                                                                                                                                                                                                                                                                                                                                               |
| **Automatically connect**                  | Enable the checkbox.                                                                                                                                                                                                                                                                                                                                                                                                     |
| **Security Type**                          | **WPA/WPA2/WPA3 Enterprise (802.1X)**                                                                                                                                                                                                                                                                                                                                                                                    |
| **Extensible Authentication Protocol**     | **EAP-TLS**                                                                                                                                                                                                                                                                                                                                                                                                              |
| **Maximum TLS Version**                    | **1.2**                                                                                                                                                                                                                                                                                                                                                                                                                  |
| **Username**                               | Anonymous                                                                                                                                                                                                                                                                                                                                                                                                                |
| **Server Certificate Authority**           | Reference the certificate profile containing your [RADIUS server certificate root CA](https://docs.radiusaas.com/profile-deployment/google-workspace/server-trust).                                                                                                                                                                                                                                                      |
| **Server Certificate Domain Suffix Match** | <p>Add the</p><ul><li><strong>Subject Alternative Name (SAN)</strong></li><li>and <strong>Common Name (CN)</strong></li></ul><p>of your <em>active</em> RADIUS <a href="../../../admin-portal/settings/settings-server#server-certificates"><strong>Server Certificate.</strong></a> These properties can be found by expanding the active server certificate and copying the relevant values. See screenshot below.</p> |
| **SCEP profile**                           | Reference your [SCEP certificate profile](https://docs.scepman.com/certificate-deployment/static-certificates/google-workspace/chromeos#add-a-scep-profile).                                                                                                                                                                                                                                                             |

<figure><img src="https://1222554226-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSWU1DQ4UGkqER7uGNUOm%2Fuploads%2FRcahQBaWo6B93ETXbwZu%2Fimage.png?alt=media&#x26;token=6656edd3-468c-4884-8e05-4466ef031292" alt=""><figcaption><p>Showing <strong>Subject Alternative Name (SAN)</strong> and <strong>Common Name (CN)</strong> </p></figcaption></figure>

4. Click **Save**.

<figure><img src="https://1222554226-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSWU1DQ4UGkqER7uGNUOm%2Fuploads%2FBIrphYaMPl1A83i982tZ%2Fimage.png?alt=media&#x26;token=c6b190be-4ddf-448c-9753-e3f2fb5dfc3d" alt=""><figcaption></figcaption></figure>

<figure><img src="https://1222554226-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSWU1DQ4UGkqER7uGNUOm%2Fuploads%2FRJyoECB5x2QphBPxDNdN%2Fimage.png?alt=media&#x26;token=e2c56d60-43af-49cd-a046-4a4ef3fa4336" alt=""><figcaption></figcaption></figure>

<figure><img src="https://1222554226-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSWU1DQ4UGkqER7uGNUOm%2Fuploads%2FHVBOZwivnKaISE3gNxFu%2Fimage.png?alt=media&#x26;token=b3826b63-e30a-4f26-8d94-e8b84ed644b0" alt=""><figcaption></figcaption></figure>
