---
title: "Certificate file creating"
canonical: "https://docs.cuesystem.com/space/GWSG/276070428/Certificate%20file%20creating"
format: markdown
---
- For the newly created service account, click the **edit **button.
  
- Select tab "**KEYS**" tab, then tap "**ADD KEY**" and select "**Create new key**".
  
- In the new pop-up window, select "**JSON**" under "Key type" and click "**CREATE**".
  
- This creates a "KEY", i.e. a certificate file. This file is automatically downloaded to your computer and saved in your "**Downloads**" folder. The format of the file name is "NameOfTheProject_***.json", where *** in the name is a random string. This file contains the private key for secure communications with Google Workspace servers.

> ⚠️ You will need the certificate file later for touchONE system configuration. You will **no longer be able to retrieve** this certificate file after you leave this page, so keep it in a safe place.

- An information window with the name of the certificate file opens. Close it with the "**CLOSE**" button.
  
- On the same page (IAM & Admin / Service Accounts / Keys) you can manage your certificates, create new ones, delete old or discredited ones, etc.

Continue with [Service account setup](https://cue.atlassian.net/wiki/spaces/GWSG/pages/273121417).