---
title: Assigning agent listener key pairs
description: Before you create an agent, import or create an agent listener key pair and assign it to the agent listener.
component: pingaccess
version: 9.1
page_id: pingaccess:pingaccess_user_interface_reference_guide:pa_assigning_agent_listener_key_pairs
canonical_url: https://docs.pingidentity.com/pingaccess/9.1/pingaccess_user_interface_reference_guide/pa_assigning_agent_listener_key_pairs.html
llms_txt: https://docs.pingidentity.com/pingaccess/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: February 6, 2023
section_ids:
  steps: Steps
---

# Assigning agent listener key pairs

Before you create an agent, import or create an agent listener key pair *(tooltip: \<div class="paragraph">
\<p>The private key and public key represented by a certificate.\</p>
\</div>)* and assign it to the agent listener.

## Steps

1. Import or generate a key pair.

   The key pair's subject or subject alternative names list needs to include the host or hosts the agent will use to contact the PingAccess policy server.

2. Click **Security**, then go to **Key Pairs > Key Pairs**.

3. Click the **Pencil** icon.

4. Click **Assign HTTPS Listener** for the key pair.

5. Select the **Agent** check box.

6. Click **Save**.

   |   |                                                                                                                                                |
   | - | ---------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | If the environment is clustered, check the `pingaccess.log` file on each engine to ensure replication completed before restarting each engine. |