Setting up Puppet certificates
To generate and sign a certificate, follow the next steps:
In the agent side run this command to generate an empty certificate:
# puppet agent -t
In the server side, list the current certificates that need approval:
# puppet cert list
It should output a list with your node’s hostname.
Approve the certificate, replacing
hostname.example.com
with your agent's node name:# puppet cert sign hostname.example.com
Back on the Puppet agent node, run in the puppet agent again:
# puppet agent -t
Note
Remember that private network DNS is a prerequisite for a successful certificate signing.