1. Download the X.509 Certificate Integration Kit .zip archive from the Ping Identity Integration Directory.
  2. Stop PingFederate.
  3. If you are upgrading an existing deployment, delete x509-certificate-adapter-<version>.jar from <pf_install>/pingfederate/server/default/deploy.
  4. Extract the .zip archive and merge the contents of the dist directory with your <pf_install>/pingfederate directory.
  5. In <pf_install>/pingefederate/bin/run.properties, change the value of pf.secondary.https.port from -1 to a valid port number.
  6. Start PingFederate.
  7. If you operate PingFederate in a cluster, repeat steps 2-6 for each engine node.