Shlomi,
I should have mentioned in my post that we are using version 12.53 for both LR controller and LG.
Regarding "Do you want to use a unique certificate per Load Generator or a single certificate for all of them?", since we have a lot of load generators in our system, I would choose "a single certificate for all of them".
I read the blog post you referenced above, however it raised some additional questions in my mind. The 3rd paragraph from the end of the section "Working with certificates" states "You can create a single unique certificate in advance and install it on all LoadRunner components, or alternatively you can create a separate certificate for each of the client machines such as the Controller, Load Generator over firewall, and Monitor over firewall. For client certificates, the latter is recommended so that you can differentiate between them."
1) If I "create a single unique certificate in advance and install it on all LoadRunner components", should I install the same single unique certificate on both the LoadRunner controller and Load Generators, since they are all "LoadRunner components"?
2) If the answer to the previous question is yes, then that would seem to conflict with the SSL Client-to-SSL Server protocol messages in the diagram near the beginning of the referenced blog post. That diagram implies that there is a server certificate [on load generator] and a client certificate [on LR controller] that are different. Please clarify.
Homer-the-Great