---
title: Replacing the Admin Console SSL Certificate
description: To avoid seeing a certificate warning when you access PingCentral, replace the user-facing SSL certificate so it will no longer use the self-signed certificate.
component: pingcentral
version: 1.14
page_id: pingcentral:pingcentral_for_iam_administrators:pingcentral_admin_ssl_cert
canonical_url: https://docs.pingidentity.com/pingcentral/2.2/pingcentral_for_iam_administrators/pingcentral_admin_ssl_cert.html
llms_txt: https://docs.pingidentity.com/pingcentral/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: June 20, 2024
superseded_by: https://docs.pingidentity.com/pingcentral/2.2/pingcentral_for_iam_administrators/pingcentral_admin_ssl_cert.html
section_ids:
  about-this-task: About this task
  steps: Steps
  result: Result:
  result-2: Result:
  result-3: Result:
---

# Replacing the Admin Console SSL Certificate

To avoid seeing a certificate warning when you access PingCentral, replace the user-facing SSL certificate so it will no longer use the self-signed certificate.

## About this task

Import your proprietary certificate into PingCentral by uploading the PKCS12 file that contains it.

## Steps

1. Select the **Setting** tab..

2. Expand the **Security** menu and select **TLS Key Pair**.

   ### Result:

   The TSK Key Pair page displays information about the key pair, including its status and expiration date.

   ![Example of the TLS Key Pair page.](_images/pua1624645430539.png)

3. To import a new key pair, click **Import Key Pair**.

   ### Result:

4. On the **Import Key Pair** window, click **Choose PKCS12 File** and select the `.p12` file to upload it.

5. In the **File Password** field, enter the password to the keystore file.

6. In the **Alias** field, specify the alias of the certificate in the keystore file that you want to use for the Admin Console SSL Certificate, if required.

   * If the `.p12` file being imported for TLS key pair contains a single alias, PingCentral accepts the file without requiring an alias.

   * If the `.p12` file being imported for TLS key pair contains multiple aliases, PingCentral requires the alias.

7. In the **Key Password** field, enter the password for the selected certificate if the PKCS12 file requires a separate password for the key.

8. Click **Import**.

9. Restart PingCentral.

   ### Result:

   After PingCentral restarts, you will be able to access PingCentral without receiving a certificate warning.