diff --git a/octavia/upgrade/render_config.sls b/octavia/upgrade/render_config.sls
index d8de66b..837657a 100644
--- a/octavia/upgrade/render_config.sls
+++ b/octavia/upgrade/render_config.sls
@@ -4,11 +4,11 @@
   test.show_notification:
     - text: "Running octavia.upgrade.render_config"
 
+{%- if api.get('enabled', False) %}
 /etc/octavia/certificates/openssl.cnf:
   file.managed:
   - source: salt://octavia/files/{{ api.version }}/certificates/openssl.cnf
 
-{%- if api.get('enabled', False) %}
 /etc/octavia/octavia_api.conf:
   file.managed:
   - source: salt://octavia/files/{{ api.version }}/octavia_api.conf