diff --git a/content/rancher/v2.0-v2.4/en/installation/resources/update-rancher-cert/_index.md b/content/rancher/v2.0-v2.4/en/installation/resources/update-rancher-cert/_index.md
index 76865145076..526155b9ee7 100644
--- a/content/rancher/v2.0-v2.4/en/installation/resources/update-rancher-cert/_index.md
+++ b/content/rancher/v2.0-v2.4/en/installation/resources/update-rancher-cert/_index.md
@@ -219,7 +219,11 @@ helm upgrade rancher rancher-stable/rancher \
   --set ...
 ```
 
-After upgrade is completed, the `privateCA` parameter <b>must</b> be either removed or set to `false` because the CA is valid:
+On upgrade, you can either 
+
+- remove `--set ingress.tls.source=secret \` from the Helm upgrade command, as shown above, or 
+
+- remove the `privateCA` parameter or set it to `false` because the CA is valid:
 
 ```
 set privateCA=false
diff --git a/content/rancher/v2.5/en/installation/resources/update-rancher-cert/_index.md b/content/rancher/v2.5/en/installation/resources/update-rancher-cert/_index.md
index 09485cf47dd..9af5b7bf3db 100644
--- a/content/rancher/v2.5/en/installation/resources/update-rancher-cert/_index.md
+++ b/content/rancher/v2.5/en/installation/resources/update-rancher-cert/_index.md
@@ -231,7 +231,11 @@ helm upgrade rancher rancher-stable/rancher \
   --set ...
 ```
 
-After upgrade is completed, the `privateCA` parameter <b>must</b> be either removed or set to `false` because the CA is valid:
+On upgrade, you can either 
+
+- remove `--set ingress.tls.source=secret \` from the Helm upgrade command, as shown above, or 
+
+- remove the `privateCA` parameter or set it to `false` because the CA is valid:
 
 ```
 set privateCA=false
diff --git a/content/rancher/v2.6/en/installation/resources/update-rancher-cert/_index.md b/content/rancher/v2.6/en/installation/resources/update-rancher-cert/_index.md
index c9bdf724e3a..35ef121f40c 100644
--- a/content/rancher/v2.6/en/installation/resources/update-rancher-cert/_index.md
+++ b/content/rancher/v2.6/en/installation/resources/update-rancher-cert/_index.md
@@ -228,7 +228,11 @@ helm upgrade rancher rancher-stable/rancher \
   --set ...
 ```
 
-After upgrade is completed, the `privateCA` parameter <b>must</b> be either removed or set to `false` because the CA is valid:
+On upgrade, you can either 
+
+- remove `--set ingress.tls.source=secret \` from the Helm upgrade command, as shown above, or 
+
+- remove the `privateCA` parameter or set it to `false` because the CA is valid:
 
 ```
 set privateCA=false