Get the Puppet CA certificate chain to establish trust with your PuppetDB certificate. To get the certificate chain in Puppet Enterprise, log in as the root user or administrator.
Version and installation information
PE version: All supported
Print the CA certificate chain on an agent node or get the certificate chain from a file on disk of an agent node in PE.
To print the path to the CA certificate chain on an agent node, run the following as
root or as an administrator:
puppet config print localcacert
To get the certificate chain from an API call to PE.
https://<fqdn of primary>:8140/puppet-ca/v1/certificate/ca