Update pe.conf

1. Edit the following file on the PE primary:

/etc/puppetlabs/enterprise/conf.d/pe.conf

2. Add the following configuration:

"puppet_enterprise::database_ssl": true
"puppet_enterprise::database_cert_auth": false

"puppet_enterprise::profile::console::database_properties": "?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-ca&sslrootcert=<DB_CA_CERT_PATH>"
"puppet_enterprise::profile::puppetdb::database_properties": "?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-ca&sslrootcert=<DB_CA_CERT_PATH>"
"puppet_enterprise::profile::orchestrator::database_properties": "?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-ca&sslrootcert=<DB_CA_CERT_PATH>"
"puppet_enterprise::profile::patching_service::database_properties": "?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-ca&sslrootcert=<DB_CA_CERT_PATH>"
"puppet_enterprise::profile::infra_assistant::database_properties": "?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-ca&sslrootcert=<DB_CA_CERT_PATH>"
"puppet_enterprise::profile::workflow_service::database_properties": "?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-ca&sslrootcert=<DB_CA_CERT_PATH>"

"puppet_enterprise::profile::database::puppetdb_database_password": "<DB_PASSWORD>"
"puppet_enterprise::profile::database::classifier_database_password": "<DB_PASSWORD>"
"puppet_enterprise::profile::database::activity_database_password": "<DB_PASSWORD>"
"puppet_enterprise::profile::database::orchestrator_database_password": "<DB_PASSWORD>"
"puppet_enterprise::profile::database::inventory_database_password": "<DB_PASSWORD>"
"puppet_enterprise::profile::database::hac_database_password": "<DB_PASSWORD>"
"puppet_enterprise::profile::database::patching_database_password": "<DB_PASSWORD>"
"puppet_enterprise::profile::database::infra_assistant_database_password": "<DB_PASSWORD>"
"puppet_enterprise::profile::database::workflow_database_password": "<DB_PASSWORD>"
"puppet_enterprise::puppetdb_database_password": "<DB_PASSWORD>"
"puppet_enterprise::classifier_database_password": "<DB_PASSWORD>"
"puppet_enterprise::rbac_database_password": "<DB_PASSWORD>"
"puppet_enterprise::activity_database_password": "<DB_PASSWORD>"
"puppet_enterprise::orchestrator_database_password": "<DB_PASSWORD>"
"puppet_enterprise::inventory_database_password": "<DB_PASSWORD>"
"puppet_enterprise::hac_database_password": "<DB_PASSWORD>"
"puppet_enterprise::patching_database_password": "<DB_PASSWORD>"
"puppet_enterprise::infra_assistant_database_password": "<DB_PASSWORD>"
"puppet_enterprise::workflow_database_password": "<DB_PASSWORD>"

"puppet_enterprise::profile::console::database_host": "<DB_HOST>"
"puppet_enterprise::profile::puppetdb::database_host": "<DB_HOST>"
"puppet_enterprise::profile::orchestrator::database_host": "<DB_HOST>"
"puppet_enterprise::profile::orchestrator::inventory_database_host": "<DB_HOST>"
"puppet_enterprise::profile::patching_service::database_host": "<DB_HOST>"
"puppet_enterprise::profile::infra_assistant::database_host": "<DB_HOST>"
"puppet_enterprise::profile::workflow_service::database_host": "<DB_HOST>"

3. Ensure passwords match those set for the database roles set during the migration.