# Create digital certificates

This task describes how to create a Certification Authority and a Digital Certificate for working with SSL (Secure Socket Layer) to secure communication to your cloud-based load generators.

In this topic:

## Create a Certification Authority (CA)

This task describes how to create a Certification Authority.

Note: This step describes how to create a CA using the gen_ca_cert.exe utility. If you are working on a Linux platform, use the gen_ca_cert utility instead.

1. Run the gen_ca_cert utility from the <LoadRunner root folder>\bin folder.

2. Run the gen_ca_cert command with at least one of the following options:

   - -country_name

   - -organization name

   - -common_name

   This process creates two files in the folder from which the utility was run: the CA Certificate (cacert.cer), and the CA Private Key (capvk.cer).

   Note: By default, the CA is valid for three years from when it is generated. To change the validation dates, use the -nb_time (beginning of validity) and/or -na_time (end of validity) options. The date format is DD/MM/YYYY.

   The following example creates two files: ca_igloo_cert.cer and ca_igloo_pk.cer in the current folder:

   gen_ca_cert ‑country_name "North Pole" ‑organization_name "Igloo Makers" ‑common_name "ICL" ‑CA_cert_file_name "ca_igloo_cert.cer" ‑CA_pk_file_name "ca_igloo_pk.cer" ‑nb_time 31/12/2020 ‑na_time 31/12/2023

3. Install the CA using one of the following options:

   - -install <name of certificate file>. Replaces any previous CA list and creates a new one that includes this CA only.

   - -install_add <name of certificate file>. Adds the new CA to the existing CA list.

   The `-install` and `-install_add` options install the certificate file only. Keep the private key file in a safe place and use it only for issuing certificates.

Back to top

## Create a digital certificate

This task describes how to create a digital certificate.

Note: This step describes how to create a digital certificate using the gen_cert.exe utility. If you are working on a Linux platform, use the gen_cert utility instead.

1. Run the gen_cert utility from the <LoadRunner root folder>\bin folder.

2. Run the gen_cert command with at least one of the following options:

   - -country_name

   - -organization_name

   - -organization_unit_name

   - -eMail

   - -common_name

   It is important to note the following:

   - The CA Certificate and the CA Private Key files are necessary for the creation of the certificate. By default, it is assumed that they are in the current folder, and are named cacert.cer and capvk.cer respectively. In any other case, use the -CA_cert_file_name and -CA_pk_file_name options to give the correct locations.

   - The certificate file is created in the folder from which the utility was run. By default, the file name is cert.cer.

Back to top

## Copy the certificates to LoadRunner Enterprise and the Controller

After creating a Certification Authority (CA) and a Digital Certificate, you must store the files on the LoadRunner Enterprise server and the Controller.

- LoadRunner Enterprise server:

  1. Copy cert.cer to `<LoadRunner Enterprise Server directory>\dat\cert`, and cacert.cer to `<LoadRunner Enterprise Server directory>\dat\cert\Verify`.

  2. Restart IIS​.

- Controller:

  1. Copy cert.cer to `<LoadRunner Enterprise Host directory>\dat\cert`, and cacert.cer to `<LoadRunner Enterprise Host directory>\dat\cert\Verify`.

  2. Restart LoadRunner Load Testing Service.​

Back to top

See also:

- Initial cloud settings
- Manage elastic cloud hosts

https://admhelp.microfocus.com LoadRunner Enterprise 8942
Tips to improve your search results... LoadRunner Enterprise Help Center LoadRunner Enterprise Help LR Enterprise Help 2020_SP2-SP3 All View Local Help Center View Online Help Center back Go back in browser history forward Go forward in browser history Remove search highlights next topic Go to next topic previous topic Go to previous topic Print the current topic Version: