---
features:
  - |
    If TLS on the internal network is enabled, the nova-novnc to libvirt vnc
    transport defaults to using TLS. This can be changed by setting the
    ``UseTLSTransportForVnc`` parameter, which is ``true`` by default.
    A dedicated IPA sub-CA can be specified by the ``LibvirtVncCACert``
    parameter. By default the main IPA CA will be used.