I was delighted to see that UAG 3.0 now has support for certificates in PKCS#12 format. Unfortunately trying to deploy a UAG with my PFX file fails with "Error: The specified PFX certificate file is invalid". I can convert the PFX to PEM and successfully deploy the UAG. If I try to then replace the cert using the swagger UI it fails with "Alias provided does not exist in the keystore. Provide one from the list".
The PFX contains the private key, device, intermediate and root certificate. I'm specifying an alias which is the friendly name of the device certificate.