diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls
index 23eafd14f..b8852d7a0 100644
--- a/salt/ssl/init.sls
+++ b/salt/ssl/init.sls
@@ -521,7 +521,7 @@ fleetkeyperms:
 
 {% endif %}
 
-{% if grains['role'] in ['so-node', 'so-searchnode', 'so-heavynode'] %}
+{% if grains['role'] in ['so-node', 'so-searchnode'] %}
 # Create a cert for elasticsearch
 /etc/pki/elasticsearch.key:
   x509.private_key_managed: