How to setup certificates

Configuring Mikrotik device to be CA (Certificate Authority)

First of all we need to create a trusted certificate to be a Certificate Authority.

System > Certificates > Add

Use the following configurations to create the initial certificate:

Name: arditi-mtik-ap-ca
Common Name: arditi-mtik-ap-ca
Key Usage: crl sign, key cert. sign

Once the certificate is created use the Sign button to sign the certificate.

Creating a multi-purpose certificate for the Mikrotik device

This process is similar to the creation of the CA certificate with minor changes.

System > Certificates > Add

Use the following configurations to create the certificate:

Name: arditi-mtik-ap
Common Name: arditi-mtik-ap
Key Usage: digital signature, key encipherment, data encipherment, crl sign, key cert. sign, tls client, tls server

Once the certificate is created use the Sign button to sign the certificate, this time choose the CA (arditi-mtik-ap-ca) for signing the certificate.