Depending on your PingFederate installation, you can upgrade by using the PingFederate installer for Windows or the Upgrade Utility, which automatically migrates existing PingFederate installations of 8.0 and later to the latest version. The Upgrade Utility is included with the software distribution.

For information about the updates to the latest version of PingFederate, see Upgrade considerations.

For general information about upgrading Ping Identity products and an upgrade planning guide, see Planning your upgrade.


To reduce the downtime involved in upgrading PingFederate, see Performing a near-zero downtime PingFederate upgrade.


Before upgrading your production environment, you should:

  • Upgrade your test environment and verify that the new installation meets your expectations.
  • Thoroughly retest the behavior of any customized components.

After you complete the upgrade process, you can create a backup of your previous installation and remove it from the server.

End users might experience service disruptions as you upgrade your PingFederate environment. As needed, schedule a maintenance window to perform the upgrade.

Upgrade paths

Operating system Source version Source installation medium Possible upgrade paths

Microsoft Windows

8.x through 11.x

PingFederate installer for Windows

PingFederate installer for Windows or PingFederate Upgrade Utility

8.x through 11.x

PingFederate product archive

PingFederate Upgrade Utility


8.x through 11.x

PingFederate product distribution .zip archive

PingFederate Upgrade Utility


If you are upgrading from PingFederate 7.x or earlier, contact Support for more information.

Both the PingFederate installer for Windows and the Upgrade Utility create a new installation based on the new product distribution .zip archive and then copy the relevant files and property values from the existing installation (the source) to the new installation (the target). As a result, neither tool affects the source installation.

Integration kits

Both upgrade tools also copy the program files for the deployed adapters, connectors, and token translators (the integration kits in general) from the source installation to the target installation. Although the tools don't upgrade the integration kits automatically, you can download newer versions from the Ping Identity Downloads website and upgrade the integration kits manually. For integration kit documentation, see the Ping Identity website.