I’m not sure why exactly we went the route of telling people to rename their cert/key to

console-cert

rather than using those

puppet_enterprise

parameters. If you have those parameters set, though, I believe that ends up being an unused cert/key in that directory.