Hi Luke, That's very interesting; thanks.
We do have 2 non-CA puppetmasters in each DC, so you are saying that client servers will continue to be able to call in, but we won't be able to setup any new ones? We do only have one puppetdb & foreman in the main DC. Intermediate Certs looks a bit fiddly but might be an option. Just to clarify, using these would mean we could also standup new client-servers in the other DCs if the main DC goes down? Cheers Chris -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/db860386-c9dc-4e50-964e-0a60a0b01570%40googlegroups.com.