Thanks for the reply! I'll take a look at the oracle build for hints. I was able to get the engine running, but can't get the console to work with vnc + FIPS. I found that I needed the following repos: resources.ovirt.org/repos/ovirt/github-ci/ovirt-appliance/el9/ buildlogs.centos.org/9-stream/virt/x86_64/ovirt-45/ buildlogs.centos.org/centos/9-stream/storage/x86_64/ceph-pacific/ buildlogs.centos.org/centos/9-stream/opstools/x86_64/collectd-5/ buildlogs.centos.org/centos/9-stream/storage/x86_64/gluster-10/ buildlogs.centos.org/9-stream/cloud/x86_64/openstack-yoga/ buildlogs.centos.org/centos/9-stream/nfv/x86_64/openvswitch-2/ I set he_offline_deployment=true in the deploy command. Exported ANSIBLE_HOST_KEY_CHECKING=False (setting it ansible.cfg didn't seem to work). I also needed to create a playbook that before bringing up the engine wiped the /etc/yum.repos.d/ directory to prevent dnf errors. Root ssh was also set to yes on the host. This got the engine deployed. The problem I have now is that rhel9 dropped spice/qxl. The instructions (from rhv 4.4) for setting up Encryption on the cluster results in the console.vv file being unable to authenticate with the host (tried virt-viewer directly too). I've verified the ca.crt is the same as the one on the engine and hosts. If FIPS is off on the host, I can vnc console. I can't seem to figure out which part of the vnc + tls + sasl isn't working.