---
title: Private Key Password
description: When AM is configured for client-side certificate verification, and the PEM file containing the client certificate private key is password-protected, set this property to the obfuscated password.
component: web-agents
version: 2023.11
page_id: web-agents:properties-reference:com.forgerock.agents.config.cert.key.password
canonical_url: https://docs.pingidentity.com/web-agents/2026/properties-reference/com.forgerock.agents.config.cert.key.password.html
llms_txt: https://docs.pingidentity.com/web-agents/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
superseded_by: https://docs.pingidentity.com/web-agents/2026/properties-reference/com.forgerock.agents.config.cert.key.password.html
---

# Private Key Password

When AM is configured for client-side certificate verification, and the PEM file containing the client certificate private key is password-protected, set this property to the obfuscated password.

Obfuscate the password by using `agentadmin --p` command. For example:

`$ /web_agents/agent-type/bin> ./agentadmin --p "Encryption Key" "cat cert_password.file"`

`Encrypted password value: zck+6RKqjtc=`

Where `Encryption Key` is the value of [Agent Profile Password Encryption Key](com.sun.identity.agents.config.key.html).

Default: Empty

|                    |                                                                               |
| ------------------ | ----------------------------------------------------------------------------- |
| Property name      | `com.forgerock.agents.config.cert.key.password`   Introduced in Web Agent 4.x |
| Function           | Encryption                                                                    |
| Type               | String                                                                        |
| Bootstrap property | Yes                                                                           |
| Required property  | No                                                                            |
| Restart required   | No                                                                            |