change "my server" by "my IP"
create full path
make kvm group owner of cert files