diff --git a/deployment/barbican/barbican-api-container-puppet.yaml b/deployment/barbican/barbican-api-container-puppet.yaml
index a1f707d9f2..9cc4301fdd 100644
--- a/deployment/barbican/barbican-api-container-puppet.yaml
+++ b/deployment/barbican/barbican-api-container-puppet.yaml
@@ -101,7 +101,7 @@ parameters:
     default: 'internal_api'
   ThalesVars:
     default: {}
-    description: Hash of thales-hsm role variables used to
+    description: Hash of thales_hsm role variables used to
                  install Thales client software.
     type: json
   ATOSVars:
@@ -428,7 +428,7 @@ outputs:
                         thales_hsm_config_location: "{{thales_hsm_config_location}}"
                         thales_bootstrap_client_ip: "{{thales_bootstrap_client_ip}}"
                       roles:
-                        - thales-hsm
+                        - thales_hsm
 
               - name: call ansible on rfs server
                 shell: ANSIBLE_HOST_KEY_CHECKING=False ansible-playbook -i "{{thales_rfs_inventory}}" --key-file "{{thales_rfs_keyfile}}" --ssh-extra-args "-o StrictHostKeyChecking=no" "{{thales_rfs_playbook}}"