# Importing Keys

To **import** an existing public key, go to **Setup** → **Trust Stores** select the cluster in the **Cluster** dropdown menu.

1. On the **Keys** tab, click the **IMPORT** button.
2. In the **Import Key** window, click the **UPLOAD** button and browse the file system to locate the file.
3. Click the **Open** button to load the file.
4. In the **Type** drop-down list, select the **TYPE (\*)** of the key you are importing choosing either PKHOST or PKUSR.
   1. If you select PKHOST, configure the **FORMAT** (\*) choosing one of these options: \
      \- **Automatic encoding detection**\
      \- **OpenSSH public key file**\
      \- **Secure Shell (SSH) Public Key File**
   2. If you select PKUSR, configure:\
      \- **USER**: select a user registered in Data Mover, this is not a mandatory field (value: **none**).\
      \- **FORMAT** (\*) choosing one of these options: \
          \- **Automatic encoding detection**\
          \- **OpenSSH public key file**\
          \- **Secure Shell (SSH) Public Key File**
5. Press **Confirm**.

As an alternative, you can import the SSH Keys in the pkhost repository using the `/steng/bin/certedit.sh` command line utility.

Example:

```
root@steng-p1:/steng/bin# ./certedit.sh import --in /tmp/dataone-new-server-key.pub -d pkhost -f 9  
Importing content into database pkhost  
File [/tmp/dataone-new-server-key.pub] successfully imported into [pkhost] with handle [13]
```

To display the newly imported key in the **Trust Store > Keys** tab, click the **SYNC** button.

Multiple SSH keys can be imported for the same server. They will be listed in the Keys list with unique names. See the [Trust Store](/data-mover-1.21/security/key-stores-and-trust-stores/trust-store.md) page for details.

{% hint style="danger" %}
Each SSH key can be imported **for only one server address**.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.primeur.com/data-mover-1.21/security/key-stores-and-trust-stores/trust-store/importing-keys.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.