RealWear Navigator™ 500 Series
      Back to home
      1. Knowledge Base
      2. RealWear Navigator™ 500 Series

      How to Import PFX Certificates on RealWear Devices

      Issue:

      There is a known bug in Android that prevents RealWear headsets from importing certain PFX certificates, resulting in a "wrong password" error, even when the correct password is used.

      Picture 1

      Solution:

      Android does not support importing newer PKCS12 files directly. To work around this, you need to convert your certificate to a legacy encryption format, which RealWear headsets can import successfully.

      Steps:

      1. Generate your PFX certificate for your WiFi network as usual.
      2. Convert the certificate using OpenSSL:
        • Open Terminal.
        • Convert your PFX certificate to a PEM file:
      openssl pkcs12 -nodes -in certificate.pfx -out output_certificate.pem

       

        • Convert the PEM file back to a PFX file using legacy encryption:
      openssl pkcs12 -keypbe PBE-SHA1-3DES -certpbe PBE-SHA1-3DES -export -in output_certificate.pem -out new_certificate.pfx -name "new-certificate"

       

        • If you need to set a password for your certificate, you will have options to enter it during the process.

      Following these steps will allow you to successfully import your PFX certificate on RealWear devices.

      Sources: https://stackoverflow.com/questions/71872900/installing-pcks12-certificate-in-android-wrong-password-bug