Having the full file in place allows you to use the applet to choose the network. You can generate files in systems-connections by right clicking on the applet, choosing "edit connections" and selecting the "Available to all users" checkbox when editing a connection you have set up.
A relevant snippet from the systems-connections file for the 802-1x portion could be something like this:
[802-1x] module- path=/usr/ lib/opencryptok i/libopencrypto ki.so.0 engine- path=/usr/ lib/engines/ engine_ pkcs11. so client- cert=5 private- key=5
eap=tls;
<email address hidden>
pkcs11-
pkcs11-
pkcs11-slot=1
pkcs11-
pkcs11-
pin=123456
Having the full file in place allows you to use the applet to choose the network. You can generate files in systems-connections by right clicking on the applet, choosing "edit connections" and selecting the "Available to all users" checkbox when editing a connection you have set up.