---
title: Private Key Password
description: When AM is configured for client-side certificate verification and the PEM file containing the client certificate private key is password-protected, set this property to the encrypted password.
component: web-agents
version: 2025.11
page_id: web-agents:properties-reference:com.forgerock.agents.config.cert.key.password
canonical_url: https://docs.pingidentity.com/web-agents/2025.11/properties-reference/com.forgerock.agents.config.cert.key.password.html
---

# Private Key Password

When AM is configured for client-side certificate verification and the PEM file containing the client certificate private key is password-protected, set this property to the encrypted password.

This property is provided in the `agent-password.conf` file.

Encrypt the password by using `agentadmin --p` command. For example:

`$ /web_agents/agent-type/bin> ./agentadmin --p "key" $(< /tmp/pwd.txt)`

`Encrypted password value: zck…​tc=`

Where `key` is the value of [Agent Profile Password Encryption Key](com.sun.identity.agents.config.key.html) and `/tmp/pwd.txt` is a text file containing the certificate password.

Default: Empty

|                    |                                                                               |
| ------------------ | ----------------------------------------------------------------------------- |
| Property name      | `com.forgerock.agents.config.cert.key.password`   Introduced in Web Agent 4.x |
| Function           | Encryption                                                                    |
| Type               | String                                                                        |
| Bootstrap property | Yes                                                                           |
| Required property  | No                                                                            |
| Restart required   | No                                                                            |