diff --git a/controllerconfig/controllerconfig/upgrade-scripts/66-create-open-ldap-certificate.py b/controllerconfig/controllerconfig/upgrade-scripts/66-create-open-ldap-certificate.py
index 0db4688734..be7d25ef8d 100644
--- a/controllerconfig/controllerconfig/upgrade-scripts/66-create-open-ldap-certificate.py
+++ b/controllerconfig/controllerconfig/upgrade-scripts/66-create-open-ldap-certificate.py
@@ -41,9 +41,7 @@ def create_openldap_certificate():
     """
     playbooks_root = '/usr/share/ansible/stx-ansible/playbooks'
     upgrade_script = 'create-openldap-certificate-for-upgrade.yml'
-    # TODO(aning): remove the extra-vars option
-    cmd = 'ansible-playbook -e install_ca_cert=no {}/{}'.format(
-        playbooks_root, upgrade_script)
+    cmd = 'ansible-playbook {}/{}'.format(playbooks_root, upgrade_script)
     sub = subprocess.Popen(cmd, shell=True,
                            stdout=subprocess.PIPE, stderr=subprocess.PIPE)
     stdout, stderr = sub.communicate()