---
title: Mutual TLS site authenticators
description: Use key pairs to authenticate PingAccess to a target site. When initiating communication, PingAccess presents the client certificate from a key pair to the site during the mutual TLS transaction.
component: pingaccess
version: 8.3
page_id: pingaccess:pingaccess_user_interface_reference_guide:pa_mutual_tls_site_authenticators
canonical_url: https://docs.pingidentity.com/pingaccess/9.1/pingaccess_user_interface_reference_guide/pa_mutual_tls_site_authenticators.html
llms_txt: https://docs.pingidentity.com/pingaccess/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: August 4, 2023
superseded_by: https://docs.pingidentity.com/pingaccess/9.1/pingaccess_user_interface_reference_guide/pa_mutual_tls_site_authenticators.html
---

# Mutual TLS site authenticators

Use key pairs to authenticate PingAccess to a target [site](pa_sites.html). When initiating communication, PingAccess presents the client certificate from a key pair to the site during the mutual TLS transaction.

The site must trust this certificate for authentication to succeed.

|   |                                                                                                                        |
| - | ---------------------------------------------------------------------------------------------------------------------- |
|   | Several steps are required for PingAccess certificate management before configuring the mutual TLS site authenticator. |

| Field        | Description                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Key Pair** | The imported or generated key pair *(tooltip: \<div class="paragraph">&#xA;\<p>The private key and public key represented by a certificate.\</p>&#xA;\</div>)* for client authentication. Select the key pair you want to use to authenticate PingAccess to the target site.To create a key pair, see [Importing existing key pairs](pa_importing_existing_key_pairs.html) or [Generating new key pairs](pa_generating_new_key_pairs.html). |