Tonight I wasted much time on ovftool because it’s parameters are order-sensitive. FYI I think it’s alphabetic or do –help and follow that list in that order on the CLI. My final one-liner:

ovftool version 4.0.0
 /vmfs/volumes/WD_2TB_RAID5/vmware-ovftool/ovftool --acceptAllEulas -ds=WD_2TB_RAID5 --name="Ewald - vSRX01 - Olivia" --net:"VM Network"="Ewald-WAN" "https://dump.abcdef.be/work/junos-media-vsrx-x86-64-vmdisk-18.1R1.9.scsi.ova" "vi://ewald:mypass@localhost"

Then I ran into a problem where the KVM guest got into a boot-loop. I turns out Juniper rigged the KVM host with a watchdog to restart the KVM guest instances upon failure. We can suppress these ‘notifications’ however.

Use Ctrl+ALT+F2 to get a console and login using root (no password), then vi /etc/rc.local and add before the last exit line

echo 1 > /sys/module/kvm/parameters/ignore_msrs

and reboot!