Use the Certificates and Key Pairs page to set up a certificate for your environment.
The certificate must be valid when you add it to PingOne. You cannot add a
certificate before its validity period begins (the certificate’s
NotBefore date) or after it expires (the certificate’s
NotAfter date). The private key must be unencrypted. You cannot
upload a private key that is protected by a password or passphrase. The certificate,
private key, and certificate chain must all be PEM-encoded unless uploading a PKCS
12 file format.