# WiFi Profile

{% hint style="warning" %}
We strongly recommend to **not use any spaces** or **special characters** in your **SSID**.
{% endhint %}

To configure a WiFi profile in Google Workspaces for your Chromebooks, please follow these instructions:

1. In your Google **Admin console** (at admin.google.com)  > Go to **Menu** > **Devices** > **Network** > **Create a Wi-Fi network**.
2. In the **Platform access** section, check the box for **Enabled for Chromebooks (by device)**.
3. In the **Details** section, set the following:

| Details                                    | Value                                                                                                                                                                                                                                                                                                                                                                                                 |
| ------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Name**                                   | Your WiFi name (we recommend to match it with the SSID).                                                                                                                                                                                                                                                                                                                                              |
| **SSID**                                   | Your SSID.                                                                                                                                                                                                                                                                                                                                                                                            |
| **Automatically connect**                  | Enable the checkbox.                                                                                                                                                                                                                                                                                                                                                                                  |
| **Security Type**                          | **WPA/WPA2/WPA3 Enterprise (802.1X)**                                                                                                                                                                                                                                                                                                                                                                 |
| **Extensible Authentication Protocol**     | **EAP-TLS**                                                                                                                                                                                                                                                                                                                                                                                           |
| **Maximum TLS Version**                    | **1.2**                                                                                                                                                                                                                                                                                                                                                                                               |
| **Username**                               | Anonymous                                                                                                                                                                                                                                                                                                                                                                                             |
| **Server Certificate Authority**           | Reference the certificate profile containing your [RADIUS server certificate root CA](/profile-deployment/google-workspace/server-trust.md).                                                                                                                                                                                                                                                          |
| **Server Certificate Domain Suffix Match** | <p>Add the</p><ul><li><strong>Subject Alternative Name (SAN)</strong></li><li>and <strong>Common Name (CN)</strong></li></ul><p>of your <em>active</em> RADIUS <a href="/pages/-MYxfjBr5cUZwSWp9qV4#server-certificates"><strong>Server Certificate.</strong></a> These properties can be found by expanding the active server certificate and copying the relevant values. See screenshot below.</p> |
| **SCEP profile**                           | Reference your [SCEP certificate profile](https://docs.scepman.com/certificate-deployment/static-certificates/google-workspace/chromeos#add-a-scep-profile).                                                                                                                                                                                                                                          |

<figure><img src="/files/2egfORXCPqsP80T5MYft" alt=""><figcaption><p>Showing <strong>Subject Alternative Name (SAN)</strong> and <strong>Common Name (CN)</strong> </p></figcaption></figure>

4. Click **Save**.

<figure><img src="/files/TqWskqE7FQYPigVqvXNd" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/tEKO3toVyC4O0Nsl5JXf" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/YJmBB2J5eAzk90BUaVVO" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.radiusaas.com/profile-deployment/google-workspace/wifi-profile.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.