diff --git a/configuration.nix b/configuration.nix
index 6d7599e..1904783 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -60,14 +60,8 @@
   #hardware.pulseaudio.enable = true;
 
   # rtkit is optional but recommended
-  security = {
-    rtkit.enable = true;
-    pki.certificates = [ 
-      secrets.easyroamHSMW.clientKey
-      secrets.easyroamHSMW.clientCert
-      secrets.easyroamHSMW.rootCa
-    ];  
-  };
+  security.rtkit.enable = true; 
+
 
 
   services.pipewire = {
diff --git a/home.nix b/home.nix
index fe14871..95b2cf2 100644
--- a/home.nix
+++ b/home.nix
@@ -88,8 +88,18 @@
   # };
 
 
-  # Home Manager is pretty good at managing dotfiles. The primary way to manage
-  # plain files is through 'home.file'.
+  # NETWORKING
+  home.file = {
+    # easyroam HSMW
+    ".ssl/easyroam_client_cert.pem".source = ./secrets/easyroam-hsmw/easyroam_client_cert.pem;
+    ".ssl/easyroam_root_ca.pem".source = ./secrets/easyroam-hsmw/easyroam_root_ca.pem;
+    ".ssl/easyroam_client_key.pem".source = ./secrets/easyroam-hsmw/easyroam_client_key.pem;
+  };
+    networking.networkmanager.extraConfig = concatStringsSep "\n" [
+      secrets.eduroamHSMW.nmconfig
+    ];
+
+
   home.file = {
 
     # ".config/libinput/gestures".text = ''
diff --git a/secrets/passwords-and-certificates.nix b/secrets/passwords-and-certificates.nix
index e9ffc5b..97ddf2e 100644
Binary files a/secrets/passwords-and-certificates.nix and b/secrets/passwords-and-certificates.nix differ