diff --git a/install/tools/ipa-server-install b/install/tools/ipa-server-install
index 44fc5fde5..be525f73d 100755
--- a/install/tools/ipa-server-install
+++ b/install/tools/ipa-server-install
@@ -836,8 +836,8 @@ def main():
 
     print ""
     if not options.dirsrv_pkcs12:
-        print "Be sure to back up the CA certificate stored in " + dsinstance.config_dirname(ds.serverid) + "cacert.p12"
-        print "The password for this file is in " + dsinstance.config_dirname(ds.serverid) + "pwdfile.txt"
+        print "Be sure to back up the CA certificate stored in /etc/httpd/alias/cacert.p12"
+        print "The password for this file is in /etc/httpd/alias/pwdfile.txt"
     else:
         print "In order for Firefox autoconfiguration to work you will need to"
         print "use a SSL signing certificate. See the IPA documentation for more details."
diff --git a/ipaserver/install/dsinstance.py b/ipaserver/install/dsinstance.py
index 254c575c0..60436dee2 100644
--- a/ipaserver/install/dsinstance.py
+++ b/ipaserver/install/dsinstance.py
@@ -340,7 +340,7 @@ class DsInstance(service.Service):
             cadb = certs.CertDB(httpinstance.NSS_DIR, host_name=self.host_name)
             if self.self_signed_ca:
                 cadb.create_self_signed()
-                dsdb.create_from_cacert(cadb.cacert_fname)
+                dsdb.create_from_cacert(cadb.cacert_fname, passwd=None)
                 dsdb.create_server_cert("Server-Cert", self.host_name, cadb)
                 dsdb.create_pin_file()
             else: