---
title: Importing existing key pairs
description: If PingAccess is running in Federal Information Processing Standards (FIPS) mode, you can only import or export PEM-encoded key pairs. For more information, see Managing Federal Information Processing Standards (FIPS) mode.
component: pingaccess
version: 9.0
page_id: pingaccess:pingaccess_user_interface_reference_guide:pa_importing_existing_key_pairs
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/pingaccess_user_interface_reference_guide/pa_importing_existing_key_pairs.html
revdate: September 22, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Importing existing key pairs

## About this task

|   |                                                                                                                                                                                                                                                                                                |
| - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | If PingAccess is running in Federal Information Processing Standards (FIPS) mode, you can only import or export PEM-encoded key pairs. For more information, see [Managing Federal Information Processing Standards (FIPS) mode](../configuring_and_customizing_pingaccess/pa_fips_mode.html). |

To import a key pair from a PKCS#12 or PEM-encoded file:

## Steps

1. Click **Security**, then go to **Key Pairs > Key Pairs**.

2. Click **Import**.

3. In the **Alias** field, enter a name that identifies the key pair.

   Special characters and spaces are allowed. This name identifies the key pair when you're assigning the key pair to various configurations, such as [HTTPS Listeners](pa_assigning_key_pairs_to_https_listeners.html).

4. In the **Password** field, enter a password to protect the key pair file.

   PingAccess uses the password to read the file.

5. Click **Choose File** to locate the key pair file.

6. Click **Save** to import the file.

   |   |                                                                                                                                                                                                |
   | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | If the key pair is either expired or not yet valid, PingAccess displays a warning, but the import will proceed. If the key pair cannot be read using the specified password, the import fails. |