On Wed, May 03, 2023 at 17:38:16 +0200, Kamil Jońca wrote: Server-side location of the certificates can be configured in the appropriate config file based on how your host is configured ( /etc/libvirt/virtproxyd.conf, /etc/libvirt/libvirtd.conf, you also need to enable virtpoxyd's TLS socket). In the config file you have the following config options: key_file, cert_file, ca_file, crl_file The client file names need to conform to the expected values. The path to the directory containing the certificates can be changed per connection using the 'pkipath' URI argument. See: https://libvirt.org/uri.html#tls-transport