1. First, generate a certificate request, and use the certificate management tool to generate a certificate request file containing router identity information and public key.
2. Secondly, obtain the signing certificate, provide the generated CSR file to the certificate authority for signature, verify your identity and generate the corresponding digital certificate.
3. Finally, configure the EAP certificate, install the signature certificate into the EAP settings of RouteOS, and upload it to the router.