diff --git a/freeipa.spec.in b/freeipa.spec.in
index a58868336..a6100ece8 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -134,7 +134,6 @@ BuildRequires:  python-lesscpy
 # makeapi/makeaci is using Python 2 only for now
 #
 BuildRequires:  python-ldap
-BuildRequires:  python-nss
 BuildRequires:  python-netaddr
 BuildRequires:  python-pyasn1
 BuildRequires:  python-pyasn1-modules
@@ -635,7 +634,6 @@ Requires: python-gssapi >= 1.2.0
 Requires: gnupg
 Requires: keyutils
 Requires: pyOpenSSL
-Requires: python-nss >= 0.16
 Requires: python-cryptography >= 1.6
 Requires: python-netaddr
 Requires: python-libipa_hbac
@@ -684,7 +682,6 @@ Requires: python3-gssapi >= 1.2.0
 Requires: gnupg
 Requires: keyutils
 Requires: python3-pyOpenSSL
-Requires: python3-nss >= 0.16
 Requires: python3-cryptography >= 1.6
 Requires: python3-netaddr
 Requires: python3-libipa_hbac
diff --git a/ipalib/setup.py b/ipalib/setup.py
index 4239f0c05..cdbd61c01 100644
--- a/ipalib/setup.py
+++ b/ipalib/setup.py
@@ -41,7 +41,6 @@ if __name__ == '__main__':
             "netaddr",
             "pyasn1",
             "pyasn1-modules",
-            "python-nss",
             "six",
         ],
         extras_require={
diff --git a/ipapython/setup.py b/ipapython/setup.py
index 2fc039fe7..f4bc3f868 100755
--- a/ipapython/setup.py
+++ b/ipapython/setup.py
@@ -46,7 +46,6 @@ if __name__ == '__main__':
             "pyldap",
             "netaddr",
             "netifaces",
-            "python-nss",
             "requests",
             "six",
         ],
diff --git a/ipasetup.py.in b/ipasetup.py.in
index 979e68348..0940f5f49 100644
--- a/ipasetup.py.in
+++ b/ipasetup.py.in
@@ -75,7 +75,6 @@ PACKAGE_VERSION = {
     'kdcproxy': 'kdcproxy >= 0.3',
     'netifaces': 'netifaces >= 0.10.4',
     'pyldap': 'pyldap >= 2.4.15',
-    'python-nss': 'python-nss >= 0.16',
     'python-yubico': 'python-yubico >= 1.2.3',
     'qrcode': 'qrcode >= 5.0',
 }
diff --git a/ipatests/setup.py b/ipatests/setup.py
index 2f67ec405..4c02c799a 100644
--- a/ipatests/setup.py
+++ b/ipatests/setup.py
@@ -75,7 +75,7 @@ if __name__ == '__main__':
         ],
         extras_require={
             "integration": ["dbus-python", "pyyaml", "ipaserver"],
-            "ipaserver": ["ipaserver", "python-nss"],
+            "ipaserver": ["ipaserver"],
             "webui": ["selenium", "pyyaml", "ipaserver"],
             "xmlrpc": ["ipaserver"],
         }
diff --git a/pylintrc b/pylintrc
index bff23059d..f92adeea8 100644
--- a/pylintrc
+++ b/pylintrc
@@ -16,8 +16,7 @@ extension-pkg-whitelist=
     _ldap,
     cryptography,
     gssapi,
-    netifaces,
-    nss
+    netifaces
 
 
 [MESSAGES CONTROL]