+ mkdir -p /etc/invirt/vnc
+ if ! [ -e /etc/invirt/vnc/server.pem ]; then
+ openssl genrsa -out /etc/invirt/vnc/server.pem 1024 >/dev/null
+ fi
+
+ if ! [ -e /etc/invirt/vnc/server.crt ]; then
+ openssl req -new -x509 -nodes -sha1 -days 730 -subj "/CN=$(hostname -f)" -key /etc/invirt/vnc/server.pem \
+ > /etc/invirt/vnc/server.crt
+ fi
+
+ if ! [ -e /etc/invirt/vnc/token-key ]; then
+ openssl rand -base64 33 >/etc/invirt/vnc/token-key
+ fi