--- title: System requirements description: PingFederate has the following recommended system versions and requirements. component: pingfederate version: 13.0 page_id: pingfederate:installing_and_uninstalling_pingfederate:pf_system_requirements canonical_url: https://docs.pingidentity.com/pingfederate/13.0/installing_and_uninstalling_pingfederate/pf_system_requirements.html revdate: December 17, 2025 section_ids: operating-systems-and-virtualization: Operating systems and virtualization java_environment: Java environment browsers: Browsers tls-protocol: TLS protocol datastore-integration: Datastore integration distributed-cache-optional: Distributed cache (optional) secret-manager-optional: Secret manager (optional) proxy-client-authentication-optional: Proxy client authentication (optional) hardware-security-modules-optional: Hardware security modules (optional) minimum-hardware-requirements: Minimum hardware requirements running-pingfederate-on-amazon-web-services: Running PingFederate on Amazon Web Services --- # System requirements PingFederate has the following recommended system versions and requirements. ## Operating systems and virtualization | | | | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | PingFederate is tested with default configurations of operating-system components. If your organization customizes implementations or installs third-party plugins, deployment efforts could affect the PingFederate server. | | Component | Supported versions | | ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Operating systems | * Amazon Linux 2023 * Canonical Ubuntu 22.04 LTS, and 24.04 LTS * Microsoft Windows Server 2016, 2019, and 2022 * Oracle Linux (Red Hat Compatible Kernel) 7.9, 8.10, 9.6, and 10.0 * Red Hat Enterprise Linux ES 7.9, 8.10, and 9.6, and 10.0 * SUSE Linux Enterprise 12 SP5 and 15 SP4 * RockyLinux 9.6 and 10.0 | | Docker support | - Docker version: 28.2.2 View the PingFederate Docker image on [DockerHub](https://hub.docker.com/r/pingidentity/pingfederate). Learn more in the Ping Identity [DevOps documentation](https://developer.pingidentity.com/devops/devops-landing-page.html). Note that only the PingFederate software is licensed under Ping Identity's end user license agreement, and any other software components contained within the image are licensed solely under the terms of the applicable open source or third-party license. Ping Identity accepts no responsibility for the performance of any specific virtualization software and in no way guarantees the performance or interoperability of any virtualization software with its products. | | Virtualization | Although Ping Identity doesn't qualify or recommend any specific virtual machine (VM) or container products other than those already specified, PingFederate has run well on several, including AWS Fargate, Hyper-V, VMWare, and Xen. The list of products is provided for example purposes only. We view all products in this category equally. Ping Identity accepts no responsibility for the performance of any specific virtualization software and in no way guarantees the performance, interoperability, or both of any VM or container software with its products. | ## Java environment * Amazon Corretto 17 and 21 * OpenJDK 17 and 21 * Oracle Java SE Development Kit 17 LTS, and 21 LTS | | | | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | | Ping Identity Java Support Policy applies. Learn more in [Java Support Policy](https://support.pingidentity.com/s/article/PingIdentity-Java-Support-Policy) in the Ping Identity Knowledge Base. | | | | | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | PingFederate doesn't support any JDK 11 version before 11.0.4 due to an error covered in the [Oracle Java Bug Database](https://bugs.java.com/bugdatabase/view_bug?bug_id=8215790). | ## Browsers | Server | Supported browsers | | --------------------- | --------------------------------------------------------------------------------------------------------------------------- | | Runtime server | * Apple Safari * Google Chrome * Microsoft Edge * Mozilla Firefox * Apple iOS 26 (Safari) * Google Android 16 (Chrome) | | Administrative server | - Google Chrome - Microsoft Edge - Mozilla Firefox | ## TLS protocol * Runtime server and administrative server * TLS 1.2 and 1.3 | | | | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | | If PingFederate is in HSM mode, TLS is only compatible with some Java versions. Learn more in [Known issues and limitations](../release_notes/pf_release_notes_130.html#HSMs). | ## Datastore integration | Functionality | Supported versions | | ------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | User-attribute lookup | * PingDirectory 9.3, 10.1, 10.2, 10.3, 11 * PingDS (Formerly ForgeRock DS) 7.5 and 8.0 * Amazon DynamoDB * Amazon Aurora MySQL 3.10 (compatible with MySQL 8.0.42) * Amazon Aurora PostgreSQL (compatible with PostgreSQL 16.4) * Azure SQL Managed Instance * Microsoft Active Directory 2016 and 2022 * Microsoft SQL Server 2017, 2019, and 2022 * Oracle Database 12c Release 2 and 19c * Oracle MySQL 8.0 and 8.4 * Oracle Unified Directory 12c * PostgreSQL 13.4, 16.4, 17.0, and 18.0 * Custom implementation through the PingFederate SDK | | SaaS or SCIM outbound provisioning | - Provisioning channel data source * PingDirectory 9.3, 10.1, 10.2, 10.3, and 11 * PingDS (Formerly ForgeRock DS) 7.5 and 8.0 * Microsoft Active Directory 2016 * Oracle Unified Directory 12c - Provisioning internal datastore * Amazon Aurora MySQL 3.10 (compatible with MySQL 8.0.42) * Amazon Aurora PostgreSQL (compatible with PostgreSQL 16.4) * Azure SQL Managed Instance * Microsoft SQL Server 2017, 2019, and 2022 * Oracle Database 12c Release 2 and 19c * Oracle MySQL 8.0 and 8.4 * PostgreSQL 13.4, 16.4, 17, and 18 | | SCIM inbound provisioning | * Microsoft Active Directory 2016 * Custom implementation through the PingFederate SDK | | Just-in-time (JIT) inbound provisioning | - PingDirectory 9.3, 10.1, 10.2, 10.3, and 11 - PingDS (Formerly ForgeRock DS) 7.5 and 8.0 - Azure SQL Managed Instance - Microsoft Active Directory 2016 - Microsoft SQL Server 2017, 2019, and 2022 - Oracle Unified Directory 12c | | Account linking | * PingDirectory 9.3, 10.1, 10.2, 10.3, and 11 * PingDS (Formerly ForgeRock DS) 7.5 and 8.0 * Amazon DynamoDB * Amazon Aurora MySQL 3.10.0 (compatible with MySQL 8.0.42) * Amazon Aurora PostgreSQL (compatible with PostgreSQL 16.2) * Azure SQL Managed Instance * Microsoft Active Directory 2016 * Microsoft SQL Server 2017, 2019, and 2022 * Oracle Database 12c Release 2 and 19c * Oracle MySQL 8.0 and 8.4 * Oracle Unified Directory 12c * PostgreSQL 13, 16.2, 17.0, and 18.0 | | OAuth client configuration and persistent grants | - PingDirectory 9.2, 9.3, 10.0, 10.1, 10.2, 10.3 - PingDS (Formerly ForgeRock DS) 7.5 and 8.0 - Amazon DynamoDB - Amazon Aurora MySQL 3.09 (compatible with MySQL 8.0.40) - Amazon Aurora PostgreSQL (compatible with PostgreSQL 16.4) - Azure SQL Managed Instance - Microsoft Active Directory 2016 and 2022 - Microsoft SQL Server 2016 SP2, 2017, 2019, and 2022 - Oracle Database 12c Release 2 and 19c - Oracle MySQL 8.0 and 8.4 - Oracle Unified Directory 12c - PostgreSQL 13.4, 16.4, 17.0, and 18.0 - Custom implementation through the PingFederate SDK | | Registration and profile management of local identities | * PingDirectory 9.3, 10.1, 10.2, 10.3, and 11 | | Persistent authentication sessions | - PingDirectory 9.3, 10.1, 10.2, 10.3, and 11 - PingDS 7.5 and 8.0 - Amazon DynamoDB - Amazon Aurora MySQL 3.10.0 (compatible with MySQL 8.0.42) - Amazon Aurora PostgreSQL (compatible with PostgreSQL 16.2 and 16.4) - Azure SQL Managed Instance - Microsoft SQL Server 2017, 2019, and 2022 - Oracle Database 12c Release 2 and 19c - Oracle MySQL 8.0 and 8.4 - PostgreSQL 13.4, 16.4, 17.0, and 18.0 - Custom implementation through the PingFederate SDK | | | | | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | PingFederate was tested with vendor-specific Java database connectivity (JDBC) *(tooltip: \
\

A Java API that allows Java programs to interact with databases.\

\
)* 4.2 drivers. Learn more in [Compatible database drivers](pf_compatible_database_drivers.html). | ## Distributed cache (optional) Redis ## Secret manager (optional) CyberArk Credential Provider 12 Windows Group Managed Service Account (gMSA) ## Proxy client authentication (optional) * Apache * NGINX Other proxies aren't qualified or guaranteed to work with PingFederate. Learn more in [Using Proxied Authentication for the X.509 IdP Adapter](https://support.pingidentity.com/s/article/Using-Proxied-Authentication-for-the-X-509-IdP-Adapter) in Ping Identity Support. ## Hardware security modules (optional) | Hardware security module | Qualified versions | | --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | AWS CloudHSM | * Client software version: 5.16.2PingFederate must be deployed on one of the Linux or Windows operating systems supported by both AWS CloudHSM and PingFederate. | | Entrust nShield Connect HSMs | - Host and Firmware version: 13.6.12 - Client driver version: 13.6.12 | | Thales Luna Cloud HSM Services and Luna Network HSM | * Luna HSM Client 10.9.0Learn more about the Luna HSM Client, including compatible HSMs, HSM firmware, appliance software, and client software, in the [Luna Cloud HSM Service Client Guide](https://thalesdocs.com/dpod/services/luna_cloud_hsm/extern/client_guides/Content/CRN/Luna/client/10-7-1.htm) and the [Luna Network HSM Documentation Archive](https://thalesdocs.com/gphsm/luna/7/docs/network/Content/CRN/Luna/client/10-7-0.htm). | ## Minimum hardware requirements * Multi-core Intel Xeon processor or higher We recommend a minimum of four processing cores distributed across any number of CPUs. * 4 GB of RAM Ensure that at least 1.5 GB are available to PingFederate. * 1 GB of available hard drive space ### Running PingFederate on Amazon Web Services The following hardware considerations apply to PingFederate environments running on Amazon Web Services (AWS) *(tooltip: \
\

An Amazon subsidiary providing cloud computing platforms.\

\
)*: * PingFederate is qualified to run on the Graviton 2 processor architecture * We recommend a minimum 2 processor cores and 4 GB of RAM | | | | - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | Although it's possible to run PingFederate on less powerful hardware, the guidelines provided accommodate disk space for default logging, auditing profiles, and CPU resources for a moderate level of concurrent request processing. |