How do I add the RHV-M CA Certificate to Google Chrome?

Environment

• Red Hat Enterprise Virtualization 3.4 and later
• Red Hat Virtualization 4.0, 4.1, 4.2

Issue

• How can I add the RHV-M CA to Google Chrome?
• I cannot upload a disk image from my PC/laptop ('Unable to upload image to disk due to a network error.')
• Attempting to use html5 console in RHEV-M with Google Chrome and only seeing a gray box.
• Google Chrome console shows the following error when trying to connect to html5 console of RHEL 6 guest:

Uncaught Error: Permission denied. rhevm.fqdn/ovirt-engine/services/files/spice-html5/spiceconn.js:420

Resolution

The information covered here is not officially supported by Red Hat.

1. Download the CA file. Before logging into RHVM, click on the Console Client Resources, then the ca.crt hyperlink (bottom of the page)
2. In Google Chrome, go to chrome://settings/certificates
3. Select the "Authorities" tab and click the "Import..." button. Select the file you just downloaded.
4. Select all three boxes under "Edit trust settings:"

        Trust this certificate for identifying websites
        Trust this certificate for identifying email users
        Trust this certificate for identifying software makers

5. Click "Ok" to import the CA.

You should now be able to access HTML5 consoles.

Root Cause

• CA certificate not imported.
  For older version of RHV, the CA may be available from http://rhevm.fqdn:8080/ca.crt

Diagnostic Steps

In addition, there is currently a bug that is affecting CA import (Chrome): Content from gerrit.ovirt.org is not included.packaging: setup: pki: Set subjectAltName

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.