diff --git a/inventory/host_vars/fas01.stg.phx2.fedoraproject.org b/inventory/host_vars/fas01.stg.phx2.fedoraproject.org
index 5fa8f3b367..3fc4aa512a 100644
--- a/inventory/host_vars/fas01.stg.phx2.fedoraproject.org
+++ b/inventory/host_vars/fas01.stg.phx2.fedoraproject.org
@@ -9,3 +9,4 @@ eth0_ip: 10.5.126.86
 vmhost: virthost10.phx2.fedoraproject.org
 datacenter: phx2
 master_fas_node: True
+gen_cert: True
diff --git a/roles/fas_server/templates/fas.cfg.j2 b/roles/fas_server/templates/fas.cfg.j2
index ed2f3d7846..ce105ad662 100644
--- a/roles/fas_server/templates/fas.cfg.j2
+++ b/roles/fas_server/templates/fas.cfg.j2
@@ -54,7 +54,7 @@ default_language = 'en'
 country_blacklist = ["--", "A1", "A2", "AN", "AS", "AX", "BI", "BL", "BV", "CC", "CU", "CV", "CX", "DM", "FK", "FO", "GF", "GG", "GP", "GS", "GW", "HM", "IO", "IR", "IQ", "JE", "KI", "KP", "MF", "MP", "MS", "MW", "NF", "NR", "NU", "PM", "PN", "RE", "SB", "SD", "SH", "SJ", "SY", "TC", "TF", "TK", "TL", "TV", "UM", "VC", "VG", "WF", "YT"]
 
 # Captcha
-tgcaptcha.key = '<%= fasCaptchaSecret %>'
+tgcaptcha.key = '{{ fasCaptchaSecret }}'
 tgcaptcha.jpeg_generator = 'vanasco_dowty'
 
 ###
@@ -194,7 +194,7 @@ ykval_db="postgres://ykval_verifier:{{ ykval_verifierPassword }}@db-ykval/ykval"
 {% endif %}
 
 # Enable or disable generation of SSL certificates for users
-gencert = <%= gen_cert %>
+gencert = "{{ gen_cert }}"
 
 makeexec = "/usr/bin/make"
 openssl_lockdir = "/var/lock/fedora-ca"