diff --git a/deployment/certs/ca-certs-baremetal-puppet.yaml b/deployment/certs/ca-certs-baremetal-puppet.yaml
index a989c7e199..30deb5ec02 100644
--- a/deployment/certs/ca-certs-baremetal-puppet.yaml
+++ b/deployment/certs/ca-certs-baremetal-puppet.yaml
@@ -42,14 +42,6 @@ outputs:
     value:
       service_name: ca_certs
       config_settings:
-        description: Extra hieradata needed to inject CA certificates
-        value: null
-  host_prep_tasks:
-    description: Extra ansible tasks needed to inject CA certificates
-    value:
-      - name: inject CA certs into the system store
-        import_role:
-          name: tripleo_update_trusted_cas
-        vars:
-          tripleo_update_trusted_cas_ca_map: {get_param: CAMap}
-
+        tripleo::trusted_cas::ca_map: {get_param: CAMap}
+      step_config: |
+        include tripleo::trusted_cas