USG flex 100 import a public certificate

Fabio

I am trying to import a public certificate, which is used by public CA.

But if i try .pem the answer there is no a certificate request

If i try a PKCS12, the answer is; format not supported

firmware is the last

V5.39(ABUH.1) / 2024-11-16 03:58:40

How i can import the cerificate.

PeterUK

You need to combined the .key and .crt to be a .pfx using the windows certutil tool like
certutil –MergePFX zyxel-router1.ddns.net.crt cert.pfx

The name of .key and .crt must be the same

Fabio

I have done it, and the pfx (password protected) can be imported in widows, but the USG100 say the format is not supported

PeterUK

ok try openSSL

Win32/Win64 OpenSSL Installer for Windows - Shining Light Productions

windows command like

openssl pkcs12 -export -out zyxel-router1.ddns.net.pfx -inkey zyxel-router1.ddns.net.key -in zyxel-router1.ddns.net.crt

Zyxel_Melen

Hi @Fabio,

Please reference these FAQs first.

Unable to import PFX file with intermediate certificates — Zyxel Community

How to import the certificate for local GUI used — Zyxel Community

Fabio

I understand that Zywall cannot import any STANDARD .pfx certificates, but only the certificates built with some selected software, and with a selected procedure

.I will try to convert it.