---
title: Private Client Certificate File Name
description: When AM is configured for client-side certificate verification, set this property to the file that contains the client certificate private key.
component: web-agents
version: 2025.11
page_id: web-agents:properties-reference:com.forgerock.agents.config.cert.key
canonical_url: https://docs.pingidentity.com/web-agents/2025.11/properties-reference/com.forgerock.agents.config.cert.key.html
---

# Private Client Certificate File Name

When AM is configured for client-side certificate verification, set this property to the file that contains the client certificate private key.

Agents using OpenSSL must specify the private key as a PEM file. For example: `com.forgerock.agents.config.cert.key = /opt/certificates/client_key.pem`

Agents using the Windows built-in Secure Channel API should not configure this property.

Default: Empty

|                    |                                                                      |
| ------------------ | -------------------------------------------------------------------- |
| Property name      | `com.forgerock.agents.config.cert.key`   Introduced in Web Agent 4.x |
| Function           | Encryption                                                           |
| Type               | String                                                               |
| Bootstrap property | Yes                                                                  |
| Required property  | No                                                                   |
| Restart required   | No                                                                   |