| Bolt currently uses the Ruby (OpenSSL) implementation for connecting to WinRM over a secure channel. In order to utilise host verification a root certificate must be explicitly supplied (command line or config file) or added to the Bolt installation. Being able to use the built-in Schannel provider would enable use of automatically-distributed CA certificates in a Windows environment, without further configuration. This would make (secure) use of Puppet in a Windows-dominated (enterprise) environment much simpler. |