How to Create and Install an SSL Digital Certificate

There are several ways to create a digital certificate for SSL communications.

LoadRunner Certificate Manager

If you use the LoadRunner Certificate Manager to create a CA certificate, you can generate the corresponding SSL certificate from the LoadRunner Certificate Manager as well.

  1. Run the LoadRunner Certificate Manager from Start > All Programs > HPE Software > HPE LoadRunner > Tools > LoadRunner Certificate Manager.

    If you have not previously created certificates with this application, it displays the default LoadRunner certificates.

  2. In the LoadRunner Certificate Manager, click Change.

  3. Do one of the following:

    To: Do this:
    Use an existing CA certificate from the table In the table, select the required certificate.
    Create a new CA certificate Click New and, in the Create New CA Certificate screen, enter the required values. When finished, click Create, and then select the certificate in the list.
    Import an existing CA certificate Click Import and, in the Import a CA Certificate page, click the CA Certificate and Private Key buttons to browse to and select the required files. When finished, click Import, and then select the certificate in the list.
  4. (Optional) To install this CA certificate on other LoadRunner computers, click Export and save the generated certificate. Then install it on other LoadRunner computers using the gen_ca_cert command with a -install option as described in How to Create and Install a Certificate Authority (CA).

  5. Click Next, and then click New to create a new SSL certificate. When finished, select the newly created SSL certificate.

  6. Click Next and then Finish.

    This installs the SSL certificate and corresponding CA certificate on the current LoadRunner machine.

  7. To install this SSL certificate on other LoadRunner computers, click Export to save the generated certificate. Then install it on other LoadRunner computers using the gen_ca command with the -install option as described at the end of the procedure below.

Back to top

gen_cert command line utility

If you use the gen_ca_cert utility to create a new CA certificate, you may want to follow that by using the gen_cert utility to create the SSL certificate.

  1. From the <LoadRunner root>\bin folder, run the gen_cert utility.

    For: Use:
    Windows gen_cert.exe
    Linux gen_cert
  2. Run the gen_cert command with at least one of the following options:

    • -country_name

    • -organization_name

    • -organization_unit_name

    • -eMail

    • -common_name


    • The CA Certificate and the CA Private Key files are necessary for the creation of the certificate. By default, it is assumed that they are in the current folder, and are named cacert.cer and capvk.cer respectively. In any other case, use the -CA_cert_file_name and -CA_pk_file_name options to give the correct files and locations.
    • The certificate file is created in the folder from which the utility was run. By default, the file name is cert.cer. To provide a different name, use the -cert_file_name option.
    • You can also run the gen_cert utility with the -install option to install the certificate that you create.

Back to top


You can automatically generate an SSL digital certificate on Controller using the Authentication Settings dialog box. This associates the certificate with a scenario in the Controller.

To do this, select the Generate a certificate automatically option in the Authentication Settings Dialog Box.

Back to top

Network and Security Manager command line tool

If you are using the LoadRunner Network and Security Manager command line options to automate your certificate setup process, there is also a command for creating a new digital certificate.

Use the -generate_new_cert option command to create a digital certificate. For details, see Network and Security Manager - Command Line Tool.

Back to top