Make sure to remove this (can be done from cli):
/interface wifi configuration
unset value-name=interworking.realms-raw [find]
Why did you set
disable-pmkid=yes
From the documentation:
For interfaces in AP mode, disables inclusion of a PMKID in EAPOL frames. Disabling PMKID can cause compatibility issues with client devices that make use of it.
- yes - Do not include PMKID in EAPOL frames.
- no - include PMKID in EAPOL frames.
Indeed...disabling management protection disables wpa3 as well...sure you need wpa3?