WPA (TKIP ?) in access-list

RouterOS Wireless Networking
1

We are trying to use WPA per Station
e.g.
[admin@MikroTik] interface wireless access-list> set 0 private-algo=tkip private-key=
Private key of the client to validate during authentication

PrivateKey – string value

this is what happens:
[admin@MikroTik] interface wireless access-list> set 0 private-algo=tkip private-key=testtest
bad character in key

now, what is the private key supposed to be.
btw, tkip does not show up in winbox (access-list)

2

The private key should only have hex characters. This is in the manual.