I read https://help.mikrotik.com/docs/display/ROS/MACsec and attempted to setup macsec between a Linux desktop connected to ether1 on the RB5009.
ROS expects a certain CKN, which I guess it derives from the CAK?

How do I generate the expected CAK?
Is it possible to macsec to a Linux host, the docs only indicate macsec to ROS?