RouterOS manual

Settings



certificate/settings

Type: Settings Directory

<ArgTableRow arg="builtin-trust-store" typ="alt { all-none: enum (default | all | untrusted) , component: ubit (ipsec, wpa-eap, capsman, fetch, sstp, ovpn, mqtt, email, netwatch, radius, container, userman, lora, wiliot, openflow, tr069, dot1x, dns, www, api, reverse-proxy, logging) }">RouterOS provided CA certificates</ArgTableRow> <ArgTableRow arg="current-defaults" typ="ubit (ipsec, wpa-eap, capsman, fetch, sstp, ovpn, mqtt, email, netwatch, radius, container, userman, lora, wiliot, openflow, tr069, dot1x, dns, www, api, reverse-proxy, logging)"></ArgTableRow> <ArgTableRow arg="crl-download" typ="bool">auto CRL download and update</ArgTableRow> <ArgTableRow arg="crl-use" typ="bool">perform CRL checking when validating trust chain</ArgTableRow> <ArgTableRow arg="crl-store" typ="enum (system | ram)">CRL storage location</ArgTableRow>

Source

Updated 2026-08-22.