Setting up Puppet certificates

To generate and sign a certificate, follow the next steps:

  1. In the agent side run this command to generate an empty certificate:

    # puppet agent -t
    
  2. In the server side, list the current certificates that need approval:

    # puppet cert list
    

    It should output a list with your node’s hostname.

  3. Approve the certificate, replacing hostname.example.com with your agent's node name:

    # puppet cert sign hostname.example.com
    
  4. Back on the Puppet agent node, run in the puppet agent again:

    # puppet agent -t
    

Note

Remember that private network DNS is a prerequisite for a successful certificate signing.