diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls
index 71daecfc6..0336ee84b 100644
--- a/salt/ssl/init.sls
+++ b/salt/ssl/init.sls
@@ -494,7 +494,7 @@ fleetkeyperms:
 
 {% endif %}
 
-{% if grains['role'] in ['so-search', 'so-heavynode'] %}
+{% if grains['role'] in ['so-node', 'so-heavynode'] %}
 # Create a cert for elasticsearch
 /etc/pki/elasticsearch.crt:
   x509.certificate_managed: