diff --git a/magnum/drivers/common/templates/kubernetes/fragments/enable-cert-api-manager.sh b/magnum/drivers/common/templates/kubernetes/fragments/enable-cert-api-manager.sh
index 48bc37b830..fa4bcf6f9d 100644
--- a/magnum/drivers/common/templates/kubernetes/fragments/enable-cert-api-manager.sh
+++ b/magnum/drivers/common/templates/kubernetes/fragments/enable-cert-api-manager.sh
@@ -5,10 +5,10 @@ printf "Starting to run ${step}\n"
 
 . /etc/sysconfig/heat-params
 
-if [ "$(echo $CERT_MANAGER_API | tr '[:upper:]' '[:lower:]')" != "false" ]; then
+if [ "$(echo "${CERT_MANAGER_API}" | tr '[:upper:]' '[:lower:]')" = "true" ]; then
     cert_dir=/etc/kubernetes/certs
 
-    echo -e "$CA_KEY" > ${cert_dir}/ca.key
+    echo -e "${CA_KEY}" > ${cert_dir}/ca.key
 
     chown kube.kube ${cert_dir}/ca.key
     chmod 400 ${cert_dir}/ca.key