I think a more meaningful error message should be displayed. Something like: "This smart-proxy has certificate management disabled". I don't know if other errors in the dns, puppet or dhcp functionality are any more meaningful, but I think ActiveRecord errors are not the preferred messages to display.