Hi! I need to implement a IPIP tunnel between 2 mikrotiks (RB3011 and RB4011) using security certificates. I have already configurated the IPIP tunnel with IPsec with a preshared key, but this configuration is not 100% secure. Could you please help me to implement the tunnel using certificates? thank you in advance.

hi
What are your problems?

check the following
correct time and date on each router.
availability of certificate CA on each router.
The certificate must be trusted.