19.2. Remote management over TLS and SSL
You can manage virtual machines using TLS and SSL. TLS and SSL provides greater scalability but is more complicated than ssh (refer to
Section 19.1, “Remote management with SSH”). TLS and SSL is the same technology used by web browsers for secure connections. The
libvirt
management connection opens a TCP port for incoming connections, which is securely encrypted and authenticated based on x509 certificates.
To enable SSL and TLS for VNC, refer to the libvirt Wiki:
http://wiki.libvirt.org/page/VNCTLSSetup. It is necessary to place the Certificate Authority Certificate, Client Certificate, and Client Certificate Private Key, in the following locations: