Get the Puppet CA certificate chain in Puppet Enterprise

Get the Puppet CA certificate chain to establish trust with your PuppetDB certificate. To get the certificate chain in Puppet Enterprise, log in as the root user or administrator.

Version and installation information

PE version: All supported

Solution

Print the CA certificate chain on an agent node or get the certificate chain from a file on disk of an agent node in PE.

To print the path to the CA certificate chain on an agent node, run the following as root or as an administrator:

puppet config print localcacert

To get the certificate chain from an API call to PE.

https://<fqdn of primary>:8140/puppet-ca/v1/certificate/ca