Setting up Puppet certificates
To generate and sign a certificate, follow the next steps:
- In the agent side run this command to generate an empty certificate: - # puppet agent -t 
- In the server side, list the current certificates that need approval: - # puppet cert list - It should output a list with your node’s hostname. 
- Approve the certificate, replacing - hostname.example.comwith your agent's node name:- # puppet cert sign hostname.example.com 
- Back on the Puppet agent node, run in the puppet agent again: - # puppet agent -t 
Note
Remember that private network DNS is a prerequisite for a successful certificate signing.