diff --git a/content/en/docs/tasks/administer-cluster/setup-ha-etcd-with-kubeadm.md b/content/en/docs/tasks/administer-cluster/setup-ha-etcd-with-kubeadm.md
index 1ac91bf770..3a05548706 100644
--- a/content/en/docs/tasks/administer-cluster/setup-ha-etcd-with-kubeadm.md
+++ b/content/en/docs/tasks/administer-cluster/setup-ha-etcd-with-kubeadm.md
@@ -31,7 +31,9 @@ when using kubeadm to set up a kubernetes cluster.
 {{% capture steps %}}
 
 The general approach is to generate all certs on one node and only distribute
-the *necessary* files to the other nodes.
+the *necessary* files to the other nodes. Note that kubeadm contains all the necessary
+crytographic machinery to generate the certificates described below; no other cryptographic tooling 
+is required for this exercise.
 
 ## Create configuration files for kubeadm