diff --git a/env.json.sample b/env.json.sample
index 12c1d9f..46f1b58 100644
--- a/env.json.sample
+++ b/env.json.sample
@@ -14,7 +14,8 @@
 	"DEL_SSL_DEVICE_SCRIPT": "/path/to/del-device-cert",
 	"TLD": "tld",
 	"LOCAL_SERVER": "host1",
-	"DNS_KEY": "XNPXZuxWd1jUQ4lyir0ziCDc989zLhOKC9vEsZ5jawa4aYMUvCftehrdEjTG03eTZAXtzOu8b6Be2dl9uGUzMw==",
+	"DNS_KEY": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXxw==",
+	"CA_PASSPHRASE": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXx",
 	"DNS_MASTER": "10.72.0.1",
 	"DNS_TTL": "86400",
 	"SERVERS": [
diff --git a/includes/helpers.js b/includes/helpers.js
index b1fbe8e..35a1919 100644
--- a/includes/helpers.js
+++ b/includes/helpers.js
@@ -127,7 +127,7 @@ module.exports = {
 	createCert: (device, username, ipv6, ipv4) => new Promise( (resolve, reject) => {
 		const ipstring = `IP:${ipv6}${ipv4?',IP:'+ipv4:''}`
 		try {
-			let createCert = spawn(env.NEW_SSL_DEVICE_SCRIPT, [device, username, ipstring, '365'])
+			let createCert = spawn(env.NEW_SSL_DEVICE_SCRIPT, [device, username, ipstring, '365', env.CA_PASSPHRASE])
 			
 			// Collect output
 			let errors = ''
@@ -135,7 +135,6 @@ module.exports = {
 				console.log(`new-device-cert stdout: ${data}`)
 			})
 			createCert.stderr.on('data', (data) => {
-				console.error(`new-device-cert stderr: ${data}`)
 				errors += data
 			})