---
title: Generating a CSR
description: Learn how to generate a certificate signing request (CSR) in PingOne to apply for a public key certificate from a certificate authority.
component: pingone
page_id: pingone:settings:p1_generate_csr
canonical_url: https://docs.pingidentity.com/pingone/settings/p1_generate_csr.html
revdate: November 9, 2023
section_ids:
  steps: Steps
  result: Result
  related-links: Related links
---

# Generating a CSR

On the **Certificates and Key Pairs** page, you can generate a certificate signing request (CSR) and download it to your local file system.

A CSR is an encoded file you can send to the certificate authority to apply for a public key certificate. If granted, the certificate authority will send you a response. The public key in the response must match the public key of this certificate.

## Steps

1. In the PingOne admin console, go to **Settings > Certificates and Key Pairs**.

2. On the **Key Pairs** tab, browse or search for the key pair you want to use to generate a CSR.

   ![A screenshot of key pairs page.](_images/p1-cert-keypairs-page-keypair-tab.png)

3. Click the key pair to open the details panel.

4. On the **CSR** tab, click **Export CSR**.

   ![A screenshot of key pairs page.](_images/p1-cert-csr-tab.png)

5. Select the format you want to use:

   * **X509 PEM (.csr)**

   * **PKCS10 DER (.p10)**

## Result

The file is saved to your local file system.

## Related links

* [Importing the CA response](p1_import_ca_response.html)