diff --git a/oslo_templates/files/queens/keystoneauth/_type_password.conf b/oslo_templates/files/queens/keystoneauth/_type_password.conf
index 4920907..d4300bc 100644
--- a/oslo_templates/files/queens/keystoneauth/_type_password.conf
+++ b/oslo_templates/files/queens/keystoneauth/_type_password.conf
@@ -39,7 +39,7 @@
 # Defaults to system CAs. (string value)
 #cafile = <None>
 {%- if _data.get('protocol', 'http')  == 'https' %}
-cafile={{ _data.get('cacert_file', cfg.cacert_file) }}
+cafile={{ _data.cacert_file }}
 {%- endif %}
 
 # Optional domain ID to use with v3 and v2 parameters. It will be used for both