• Request a license key through the Ping Identity licensing page.
  • Ensure your are logged on to your system with sufficient privileges to install and run an application.
  • Verify that you have installed the Java runtime and that you have set the required environment variables correctly. For more information, see Installing Java in the PingFederate Server documentation.
  1. Install PingFederate using the installer for Windows or the distribution .zip file as described in the following table.
    Installation medium Steps
    PingFederate installer for Windows To install PingFederate using the installer for Windows:
    1. Download the PingFederate installer for Windows from the Ping Identity website.
    2. Double-click the .msi file to open the PingFederate Setup Wizard, and follow the instructions to complete the installation.

    PingFederate is configured to run as a service and starts automatically at the end of the installation process.


    The PingFederate installer for Windows installs only one instance of PingFederate on a Windows server. If you need additional PingFederate instances on the same Windows server, install them using the distribution .zip file.

    You must manually configure various port settings in the <pf_install>/pingfederate/bin/run.properties file for each instance to avoid port conflicts.

    Distribution .zip file To install PingFederate using the distribution .zip file:
    1. Download the distribution .zip file from the Ping Identity website. The distribution .zip file is identical for both Windows and Linux.
    2. Extract the file into an installation directory.
  2. If you have installed PingFederate by extracting the distribution .zip file, start PingFederate manually by running the following script:

    Wait for the script to finish—the startup process completes when this message appears near the end of the sequence:

    PingFederate running...

    To configure PingFederate to run as a service, follow the steps in Installing PingFederate service on Windows manually in the PingFederate Server documentation.


    When running PingFederate for Windows, switching the Java version from 8 to 11 (or the reverse) will prevent the service from running, and you will not be able to start PingFederate. The problem occurs because garbage collection logging configuration arguments that are used by Java 8 are incompatible with those used by Java 11.

    To change Java versions:

    1. Run <pf_install>\pingfederate\sbin\win-x86-64\uninstall-service.bat to de-register the PingFederate service.
    2. Install the new Java version and update the JAVA_HOME and PATH environment variables.
    3. Run <pf_install>\pingfederate\sbin\win-x86-64\install-service.bat to register the PingFederate service.

If your organization plans to manage keys and certificates using a hardware security module (HSM), see Supported hardware security modules.