@Henning Hovden I assume you’re using external CA? I can see that happening if you configured puppet CA paths