---
title: Mutual TLS site authenticators
description: Use key pairs to authenticate PingAccess to a target site. When initiating communication, PingAccess presents the client certificate from a key pair to the site during the mutual TLS transaction.
component: pingaccess
version: 9.0
page_id: pingaccess:pingaccess_user_interface_reference_guide:pa_mutual_tls_site_authenticators
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/pingaccess_user_interface_reference_guide/pa_mutual_tls_site_authenticators.html
revdate: August 4, 2023
---

# Mutual TLS site authenticators

Use key pairs to authenticate PingAccess to a target [site](pa_sites.html). When initiating communication, PingAccess presents the client certificate from a key pair to the site during the mutual TLS transaction.

The site must trust this certificate for authentication to succeed.

|   |                                                                                                                        |
| - | ---------------------------------------------------------------------------------------------------------------------- |
|   | Several steps are required for PingAccess certificate management before configuring the mutual TLS site authenticator. |

| Field        | Description                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Key Pair** | The imported or generated key pair *(tooltip: \<div class="paragraph">&#xA;\<p>The private key and public key represented by a certificate.\</p>&#xA;\</div>)* for client authentication. Select the key pair you want to use to authenticate PingAccess to the target site.To create a key pair, see [Importing existing key pairs](pa_importing_existing_key_pairs.html) or [Generating new key pairs](pa_generating_new_key_pairs.html). |