diff --git a/salt/minion/cert/ceph/rgw.yml b/salt/minion/cert/ceph/rgw.yml
new file mode 100644
index 0000000..23b0414
--- /dev/null
+++ b/salt/minion/cert/ceph/rgw.yml
@@ -0,0 +1,17 @@
+parameters:
+  _param:
+    ceph_rgw_cert_key_file: "/etc/ssl/private/ceph_rgw_key.key"
+    ceph_rgw_cert_cert_file: "/etc/ssl/certs/ceph_rgw.crt"
+    ceph_rgw_cert_all_file: "/etc/ssl/certs/ceph_rgw_all.crt"
+  salt:
+    minion:
+      cert:
+        ceph:
+          host: ${_param:salt_minion_ca_host}
+          signing_policy: cert_server
+          authority: ${_param:salt_minion_ca_authority}
+          common_name: ceph_rgw
+          alternative_names: DNS:${_param:ceph_rgw_hostname}.${_param:cluster_domain},IP:${_param:cluster_vip_address}
+          key_file: ${_param:ceph_rgw_cert_key_file}
+          cert_file: ${_param:ceph_rgw_cert_cert_file}
+          all_file: ${_param:ceph_rgw_cert_all_file}