diff --git a/content/en/docs/setup/independent/high-availability.md b/content/en/docs/setup/independent/high-availability.md
index bc7be36e30..10e0e2b32c 100644
--- a/content/en/docs/setup/independent/high-availability.md
+++ b/content/en/docs/setup/independent/high-availability.md
@@ -223,6 +223,12 @@ SSH is required if you want to control all nodes from a single machine.
     done
     ```
 
+{{< caution >}}
+Copy only the certificates in the above list. kubeadm will take care of generating the rest of the certificates
+with the required SANs for the joining control-plane instances. If you copy all the certificates by mistake,
+the creation of additional nodes could fail due to a lack of required SANs.
+{{< /caution >}}
+
 ### Steps for the rest of the control plane nodes
 
 1.  Move the files created by the previous step where `scp` was used: