There is an initiative to make SW more copy-VM-friendly, specifically to guarantee uniqueness of what shoud be unique amongst the clones (incl. the certificates): https://fedoraproject.org/wiki/User:Sgallagh/FirstTimeSetupDraft Would be good if pcs had this proposal on the radar.
No longer under "tentative" label: https://lists.fedoraproject.org/pipermail/devel/2015-August/213133.html https://fedorahosted.org/fpc/ticket/506 https://fedoraproject.org/wiki/Packaging:Initial_Service_Setup Also note that since F23, there should be sscg (Self-Signed Certificate Generator) tool that could be used for generating certificates as per system-wide configuration: https://fedoraproject.org/wiki/Packaging:Initial_Service_Setup#Generating_Self-Signed_Certificates