diff --git a/source/ciao-cluster-setup.rst b/source/ciao-cluster-setup.rst
index 345112a7..ce62206c 100644
--- a/source/ciao-cluster-setup.rst
+++ b/source/ciao-cluster-setup.rst
@@ -142,8 +142,11 @@ Copy the ``controller_cert.pem`` and ``controller_key.pem`` files to your
 controller node. You can use the same location where you will be storing
 your controller binary (``ciao-controller``).
 
-You'll also need to pull that certificate into your browser as noted below in
-the `Starting a workload` section.
+You'll also need to pull that controller certificate into system
+CA trust.  The specifics of how to do this vary by linux distribution
+(eg: ``update-ca-certificates``, ``update-ca-trust``, and ``trust``
+are examples of tools for this purpose on Ubuntu, Fedora and ClearLinux
+respectively).
 
 Keystone node
 -------------
@@ -544,4 +547,4 @@ testing.
 .. _CNCI Agent: https://github.com/01org/ciao/tree/master/networking/cnci_agent
 .. _mailing list: https://lists.clearlinux.org/mailman/listinfo/ciao-devel
 .. _ciao-cli: https://github.com/01org/ciao/tree/master/ciao-cli
-.. _ciao-webui: https://github.com/01org/ciao-webui
\ No newline at end of file
+.. _ciao-webui: https://github.com/01org/ciao-webui