How to convert *.pfx cert to work with mikrotik

How to convert *.pfx cert to work with mikrotik

This was tested on RouterOS and with GlobalSign as ssl provider, Converted with Openssl.

 

Get Started to Convert

• When you get your *.pfx cert you probably get something like this with cert IntermediateCA.cer

• Start to rename IntermediateCA.cer to IntermediateCA.crt

• Download GlobalSignRootCA from Globalsign

•  Save IntermediateCA.crt and GlobalSignRootCA for later upload to your RouterOS

Convert *.pfx cert

• openssl pkcs12 -in yourcert.pfx -nocerts -out yourcert2016.key

•  openssl pkcs12 -in yourcert.pfx -clcerts -nokeys -out yourcert2016.pem

Upload all files

•  Upload all files to router > GlobalSignRootCA, IntermediateCA.crt, yourcert2016.key and yourcert2016.pem

After Upload you need to import in Mikrotik RouterOS

• Jump in to your Mikrotik routerOS and import them in this order  GlobalSignRootCA, IntermediateCA.crt, yourcert2016.key and yourcert2016.pem and cert will be markt KLT mode in RouterOS ready to use.