Why is VNC + TLS enabled for the host after executing "Enroll Certificate" (Modify qemu config file - enable TLS), although "Enable VNC Encryption" is not enabled in the cluster settings? If you do "Reinstall" for the host, then VNC is configured without TLS support (Modify qemu config file - disable TLS), which is correct according to the cluster settings. In addition to this, the problem is aggravated by the bug https://bugzilla.redhat.com/show_bug.cgi?id=1757793