----- Original Message ----- it should work, just checked. but, yes, there is a new better way to do so without abusing the httpd root: http://<>/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA need to understand why it does not work for you, is engine working properly? do you get any event at engine.log when trying to fetch the certificate? Alon