diff --git a/README.rst b/README.rst
index 8ad30f3..6af9401 100644
--- a/README.rst
+++ b/README.rst
@@ -253,19 +253,21 @@
 ---------------------
 By default communication between Heat and Galera is unsecure.
 
+heat:
+  server:
+    database:
+      x509:
+        enabled: True
+
 You able to set custom certificates in pillar:
-server:
-  database:
-    x509:
-      enabled: True
 
 heat:
   server:
     database:
       x509:
-        cacert (certificate content)
-        cert (certificate content)
-        key (certificate content)
+        cacert: (certificate content)
+        cert: (certificate content)
+        key: (certificate content)
 
 You can read more about it here:
     https://docs.openstack.org/security-guide/databases/database-access-control.html
diff --git a/heat/server.sls b/heat/server.sls
index d169e9f..3323fe0 100644
--- a/heat/server.sls
+++ b/heat/server.sls
@@ -10,6 +10,7 @@
   pkg.installed:
   - names: {{ server.pkgs }}
   - require_in:
+    - sls: heat._ssl.mysql
     - sls: heat.db.offline_sync
 
 /etc/heat/heat.conf: