Hosts running controlplane-agent connected to this hub
Add an agent, copy the one-time enrollment token, then enroll on the host (manual or SSH-assisted). Enroll stores the client certificate and Platform CA (ca.pem) for mTLS pinning. Open Help for the full connect guide.