I managed to connect briefly but the console said ok at the top and it didn't appear I had any control. I sent ctrl-alt-delete which apparently closed the session and this was the output I saw (with O and CN appropriately populated): $ remote-viewer --debug --spice-ca-file="/tmp/ca-cert.pem" --spice-host-subject="O=<O>, CN=<CN>" spice://<CN>?tls-port=5901 (remote-viewer:22260): remote-viewer-DEBUG: Opening display to spice://<CN>?tls-port=5901 (remote-viewer:22260): remote-viewer-DEBUG: Guest (null) has a spice display (remote-viewer:22260): remote-viewer-DEBUG: After open connection callback fd=-1 (remote-viewer:22260): remote-viewer-DEBUG: Opening connection to display at spice://<CN>?tls-port=5901 (remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x28b2bd0 SpiceMainChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: notebook show status 0x266a2a0 (remote-viewer:22260): remote-viewer-DEBUG: main channel: auth failure (wrong username/password?) (remote-viewer:22260): remote-viewer-DEBUG: main channel: auth failure (wrong username/password?) (remote-viewer:22260): remote-viewer-DEBUG: main channel: opened (remote-viewer:22260): remote-viewer-DEBUG: notebook show status 0x266a2a0 (remote-viewer:22260): remote-viewer-DEBUG: virt_viewer_app_set_uuid_string: UUID changed to b048c0af-a6d6-42eb-9716-f1a00806e02d (remote-viewer:22260): remote-viewer-DEBUG: app is not in full screen (remote-viewer:22260): remote-viewer-DEBUG: app is not in full screen (remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x27d9250 SpiceRecordChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x2a39390 SpicePlaybackChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: new audio channel (remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x2684580 SpiceCursorChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x2874290 SpiceDisplayChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x285a240 SpiceInputsChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: new inputs channel (remote-viewer:22260): remote-viewer-DEBUG: creating spice display (#:0) (remote-viewer:22260): remote-viewer-DEBUG: Insert display 0 0x27ea700 (remote-viewer:22260): remote-viewer-DEBUG: Found a window without a display, reusing for this display... (remote-viewer:22260): remote-viewer-DEBUG: Zoom level not changed, using: 100 (remote-viewer:22260): remote-viewer-DEBUG: notebook show display 0x266a2a0 (remote-viewer:22260): GSpice-WARNING **: Warning no automount-inhibiting implementation available (remote-viewer:22260): remote-viewer-DEBUG: Allocated 1024x768 (remote-viewer:22260): remote-viewer-DEBUG: Child allocate 1024x768 (remote-viewer:22260): remote-viewer-DEBUG: main channel: closed (remote-viewer:22260): remote-viewer-DEBUG: Not removing main window 0 0x26678f0 (remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel SpiceInputsChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel SpiceDisplayChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: zap display channel (#0) (remote-viewer:22260): remote-viewer-DEBUG: Destroying spice display 0x27ea700 (remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel SpiceCursorChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel SpicePlaybackChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: zap audio channel (remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel SpiceRecordChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel SpiceMainChannel 0 (remote-viewer:22260): remote-viewer-DEBUG: zap main channel (remote-viewer:22260): remote-viewer-DEBUG: notebook show status 0x266a2a0 (remote-viewer:22260): remote-viewer-DEBUG: Guest HostedEngine display has disconnected, shutting down (remote-viewer:22260): remote-viewer-DEBUG: Disposing window 0x26678f0 (remote-viewer:22260): remote-viewer-DEBUG: Set connect info: (null),(null),(null),-1,(null),(null),(null),0 Now when I attempt to reconnect I see: $ remote-viewer --debug --spice-ca-file="/tmp/ca-cert.pem" --spice-host-subject="O=<O>, CN=<CN>" spice://<CN>?tls-port=5901 (remote-viewer:22497): remote-viewer-DEBUG: Opening display to spice://<CN>?tls-port=5901 (remote-viewer:22497): remote-viewer-DEBUG: Guest (null) has a spice display (remote-viewer:22497): remote-viewer-DEBUG: After open connection callback fd=-1 (remote-viewer:22497): remote-viewer-DEBUG: Opening connection to display at spice://<CN>?tls-port=5901 (remote-viewer:22497): remote-viewer-DEBUG: New spice channel 0x9b1c40 SpiceMainChannel 0 (remote-viewer:22497): remote-viewer-DEBUG: notebook show status 0x7662a0 (remote-viewer:22497): remote-viewer-DEBUG: main channel: failed to connect Could not connect to <CN>: Connection refused (remote-viewer:22497): remote-viewer-DEBUG: Destroy SPICE channel SpiceMainChannel 0 (remote-viewer:22497): remote-viewer-DEBUG: zap main channel (remote-viewer:22497): remote-viewer-DEBUG: Disposing window 0x7648f0 (remote-viewer:22497): remote-viewer-DEBUG: Set connect info: (null),(null),(null),-1,(null),(null),(null),0 And attempting to provide the console password results in: # hosted-engine --add-console-password Enter password: Command VM.setTicket with args {'params': {}, 'password': '<password>', 'vmID': 'b048c0af-a6d6-42eb-9716-f1a00806e02d', 'existingConnAction': 'keep', 'ttl': '120'} failed: (code=100, message=General Exception: ("VM 'b048c0af-a6d6-42eb-9716-f1a00806e02d' was not defined yet or was undefined",)) Thanks for all of the help Simone! Really appreciate it.