New Foreman 1.23.0 install puppet agent -t self signed certificate error

[ekohl]

I think this is what you’re running into:

Puppet clients not being integrated on provisioning

The issue is that Puppetserver 6 by default generates an intermediate certificate but Puppet agents prior to 6 don’t handle that. Probably best to upgrade your agents to version 6 but if that’s not possible then https://puppet.com/docs/puppetserver/6.5/intermediate_ca.html suggests you can remove the CA setup and restart the server to generate a new CA without an intermediate cert.