Procedure

1. Log in to your Wi5stars using a web browser. 
2. Click the dropdown menu at the Reseller level and select SSL Certificates.
3. Follow the steps (a,b,c…) below based on your needs (load a certificate already issued or generate a CSR or create a Let’s Encrypt certificate). 

If you ALREADY HAVE a certificate

a) To add your certificate to use for your Wi5stars or your gateway, click the + button on the top-right corner. 
b) In the General Data session, enter the description. From the Issued by list box, select Certification Authority, and enter the Associated Domain. 
c) Go to Certificates and load the CRT, the KEY and the Intermediate certificate files. 
d) Click Save in the top-right corner of the page. Your selected entries are saved. 

If you DO NOT HAVE a certificate

a) To generate a CSR file to use for requesting a certificate to a CA, select the SSL Certificates menu and then click the button on the top-right corner. 
b) On the newly opened tab, check the General Data auto compiled by Wi5stars. 
c) Expand the Generate the CSR session. Choose whether your certificate is Standard or Wildcard from the Domain Type list box. Verify the correctness of the Domain Name (the FQDN for which request the certificate, i.e. the FQDN used to reach Wi5stars or the FQDN used to reach the gateway/controller). 
d) Click the Generate the CSR File button to get the file to provide to the CA. 
e) When you get the CRT file and the Intermediate file from the CA, upload them into your Wi5stars as described in the previous section. 

If you want to create a LET’S ENCRYPT certificate

a) To add your certificate to use for your Wi5stars or your gateway, click the + button on the top-right corner. 
b) In the General Data session, enter the description. From the Issued by list box, select System (Let’s Encrypt) and enter the Associated Domain (the FQDN for which request the certificate, i.e. the FQDN used to reach Wi5stars or the FQDN used to reach the gateway/controller). 
c) Click Save in the top-right corner of the page to generate the Let’s Encrypt certificate.

Now you can decide if you want to use the certificate for your Wi5stars or if you want to use it in the MikroTik gateway in order to enable the HTTPS on the Welcome Portal. 

Use certificate for your Wi5stars:

4. From the Data tab, click the dropdown menu of the Reseller. 
5. Select Edit. 
6. Expand the Custom Domain session. In the SSL Certificate field, select the certificate you want to use. 
Important warning!!! The certificate must be valid for the domain name declared in the Domain Name field. 
7. Click Save in the top-right corner of the page.   

Use certificate for your MikroTik gateway:

4. Click the Data tab and expand the tree until the gateway you want to enable the SSL certificate for.
5. Click on the contextual menu and then on Edit. 
6. Scroll down till Fields for configuring the Gateway and click it. 
7. Expand Guest Interfaces and from the SLL Certificate dropdown select the certificate you want to use for the gateway. 
Important warning! The certificate must be valid for the domain name set in the Domain Name field as per point 8. 
8. On the Domain Name field, enter the domain name that will be used by the MikroTik Hotspot Service to load the Welcome Portal login page (We suggest to use for example hotspot.fqdn_set_on_systemsettings_domainname)