You can find detailed instructions here: https://www.eduroam.cz/en/uzivatel/sw/win/winxp

But don't forget, these instructions are general, and some settings needs to be changed to specific for UJEP.

When you get to this window:

Do not write there “radius1.domain.cz…” For UJEP you must use “radius.ujep.cz” and correct certificate is AddTrust, so correct settings will look like this: