Description of problem: The internal CA's certificate is downloadable from the following link: /ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA This is hard to type and impossible to guess. Perhaps we should add it to the main page (/ovirt-engine/)? It used to be available also from '/ca.crt', but this was removed in 4.0.
*** This bug has been marked as a duplicate of bug 1433676 ***