Hi there, I am trying to set up an IPsec VPN tunnel with x509 user certs on a Draytek Vigor 2860 router. I have created a self signed CA cert but in Android the options for VPN under IPSEC XAuth RSA requires a local cert and I can't find a way to export this from the root, I can only view the cert, please help.

Thanks

To get certificates out of the 2860, you have to do a bit of cut-and-paste from the screen ... there is no export function.

Copy the 'PEM Format Content' from the "View" screen and write it to a .CER file. This can be converted to DER or Base-64 encoded .CER format, or PKCS #7 (.P7B) on WIndows, using the 'certificate viewer'.
(This is the default File Assocation for .CER files - aka rundll32 cryptext.dll,CryptExtOpenCER xxxxxxx.cer)

However, note that any certificate generated on the 2860, is meant to identify the 2860 to another system ... it's not meant for any other system to use as its certificate.