---
title: "Keystore Configuration"
description: "Configure the JMeter Keystore Configuration configuration elements: properties, defaults, and practical usage notes for building reliable load tests."
url: https://docs.jmeter.ai/components/keystore-configuration/
lastUpdated: 2026-10-01
source: docs.jmeter.ai
---

# Keystore Configuration

*Part of the **Configuration Elements** category. Also documented in context in the [full Component Reference](/user-manual/component-reference/#keystore-configuration).*

![Keystore Configuration](/images/screenshots/keystore_config.png)

The Keystore Config Element lets you configure how Keystore will be loaded and which keys it will use.
This component is typically used in HTTPS scenarios where you don’t want to take into account keystore initialization into account in response time.

To use this element, you need to setup first a Java Key Store with the client certificates you want to test, to do that:

1. Create your certificates either with Java `keytool` utility or through your PKI
2. If created by PKI, import your keys in Java Key Store by converting them to a format acceptable by JKS
3. Then reference the keystore file through the two JVM properties (or add them in `system.properties`):      - `-Djavax.net.ssl.keyStore=path_to_keystore` - `-Djavax.net.ssl.keyStorePassword=password_of_keystore`

To use PKCS11 as the source for the store, you need to set `javax.net.ssl.keyStoreType` to `PKCS11`
and `javax.net.ssl.keyStore` to `NONE`.

| Name | Required | Description |
| --- | --- | --- |
| Name | No | Descriptive name for this element that is shown in the tree. |
| Preload | Yes | Whether or not to preload Keystore. Setting it to `true` is usually the best option. |
| Variable name holding certificate alias | False | Variable name that will contain the alias to use for authentication by client certificate. Variable value will be filled from CSV Data Set for example. In the screenshot, “`certificat_ssl`” will also be a variable in CSV Data Set. Defaults to `clientCertAliasVarName` |
| Alias Start Index | Yes | The index of the first key to use in Keystore, 0-based. |
| Alias End Index | Yes | The index of the last key to use in Keystore, 0-based. When using “`Variable name holding certificate alias`” ensure it is large enough so that all keys are loaded at startup. Default to -1 which means load all. |

> **Note**
> To make JMeter use more than one certificate you need to ensure that:
>
> - `https.use.cached.ssl.context=false` is set in `jmeter.properties` or `user.properties`
> - You use HTTPClient 4 implementation for HTTP Request

## Related

- [CSV Data Set & Parameterization](/topics/csv-data-set-config-guide/)
- [Thread Calculator](/tools/thread-calculator/)
- [Full Component Reference](/user-manual/component-reference/)
- [Functions and Variables](/user-manual/functions/)