root@flunder:~# cat /etc/wicd/encryption/templates/eap-ttls-pap
name = EAP-TTLS-PAP
author = aktsizr
version = 1
require identity *Identity anonymous_identity *Anonymous_Identity password *Password ca_cert *Path_to_CA_Cert

-----
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="$_ESSID"
proto=WPA
key_mgmt=WPA-EAP
pairwise=TKIP
group=TKIP
eap=TTLS
password="$_PASSWORD"
anonymous_identity="$_ANONYMOUS_IDENTITY"
identity="$_IDENTITY"
ca_cert="$_CA_CERT"
phase2="auth=PAP"
priority=2
}

...und...
root@flunder:~# grep eap-ttls-pap /etc/wicd/encryption/templates/active
eap-ttls-pap

(wicd/wicd client anschließend neustarten...)