ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
eapol_version=2
ap_scan=0

network={
key_mgmt=IEEE8021X
eap=TLS
identity="your-user@domain.com"
#password="your-pass"
eapol_flags=0
ca_cert="/etc/root_cert.crt"
client_cert="/etc/cert.crt"
private_key="/etc/private.key"
private_key_passwd=""
}