Network Manager WiFi Setup

These authentication settings work to set up eduroam on most Linux distributions, although the means of configuring these settings varies a bit.
SettingSorted ascending Value Notes
Anonymous identity anonymous@ucsb.edu  
Authentication Protected EAP (PEAP)  
CA certificate /etc/ssl/certs/USERTrust_RSA_Certification_Authority.pem Optional, but recommended for security. You may need to install a CA certificate package first, and the location may vary; this one is valid for Ubuntu and Debian.
Domain ucsb.edu  
Inner authentication MSCHAPv2  
No CA certificate is required Unchecked if supplying a CA certificate above, otherwise checked. Checking this means your device will supply your password hash to any access point claiming to be "eduroam", so supplying a CA certificate instead is recommended.
Password (Your NetID password)  
PEAP version Automatic  
Username (Your NetID including the @ucsb.edu part, e.g. "brodbeck@ucsb.edu")  
Wi-Fi security WPA2 Enterprise