We have found a defect in the newly released (2025.11.0) Database-backed certificate authority and recommend anyone who has migrated roll back to the file-based storage. To do so, run the ca_storage_export plan:

puppet plan run puppet_enterprise::ca_storage_export targets=<primary-certname>

Contact support if you need assistance with the rollback.