USG flex 100 import a public certificate

Fabio · December 2024

I am trying to import a public certificate, which is used by public CA.

But if i try .pem the answer there is no a certificate request

If i try a PKCS12, the answer is; format not supported

firmware is the last

V5.39(ABUH.1) / 2024-11-16 03:58:40

How i can import the cerificate.

Fabio · January 3

I understand that Zywall cannot import any STANDARD .pfx certificates, but only the certificates built with some selected software, and with a selected procedure

.I will try to convert it.

Fabio · January 7

sorry I make a mistake now it works.

PeterUK · December 2024

You need to combined the .key and .crt to be a .pfx using the windows certutil tool like
certutil –MergePFX zyxel-router1.ddns.net.crt cert.pfx

The name of .key and .crt must be the same

Fabio · December 2024

I have done it, and the pfx (password protected) can be imported in widows, but the USG100 say the format is not supported

PeterUK · December 2024

ok try openSSL

Win32/Win64 OpenSSL Installer for Windows - Shining Light Productions

windows command like

openssl pkcs12 -export -out zyxel-router1.ddns.net.pfx -inkey zyxel-router1.ddns.net.key -in zyxel-router1.ddns.net.crt

Zyxel_Melen · January 3

Hi @Fabio,

Please reference these FAQs first.

Unable to import PFX file with intermediate certificates — Zyxel Community

How to import the certificate for local GUI used — Zyxel Community

Fabio · January 3

I understand that Zywall cannot import any STANDARD .pfx certificates, but only the certificates built with some selected software, and with a selected procedure

.I will try to convert it.

Fabio · January 7

I try according your suggestions but it does not work

c:openssl pkcs12 -export -out etereru2.pfx -inkey etereru2.key -in etereru2.crt

errno: -17011 errmsg: PKI certificate type is not supported

windows import it correctly.

Zyxel_Melen · January 7

Hi @Fabio,

Would you be willing to send us your certificate so we can help check this issue? If so, please send me a forum message with the file.

Fabio · January 7

sorry I make a mistake now it works.

Zyxel_Melen · January 7

Oh, I see. Thanks for updating! @Fabio

USG flex 100 import a public certificate

Best Answers

All Replies

Categories

Security Help Center