diff --git a/puppet/services/database/redis.yaml b/puppet/services/database/redis.yaml
index 4f8abb01cd..9290d0c409 100644
--- a/puppet/services/database/redis.yaml
+++ b/puppet/services/database/redis.yaml
@@ -78,7 +78,8 @@ outputs:
             tripleo::profile::base::database::redis::tls_proxy_port: 6379
           - if:
             - use_tls_proxy
-            - redis_certificate_specs:
+            - tripleo::redis::service_certificate: '/etc/pki/tls/certs/redis.crt'
+              redis_certificate_specs:
                 service_certificate: '/etc/pki/tls/certs/redis.crt'
                 service_key: '/etc/pki/tls/private/redis.key'
                 hostname:
@@ -91,6 +92,7 @@ outputs:
                     template: "redis/%{hiera('cloud_name_NETWORK')}"
                     params:
                       NETWORK: {get_param: [ServiceNetMap, RedisNetwork]}
+                postsave_cmd: "/usr/bin/certmonger-redis-refresh.sh"
             - {}
       step_config: |
         include ::tripleo::profile::base::database::redis