diff --git a/roles/opendistro/opendistro-elasticsearch/tasks/LocalActions.yml b/roles/opendistro/opendistro-elasticsearch/tasks/LocalActions.yml
index e33ce7e5..432a4423 100644
--- a/roles/opendistro/opendistro-elasticsearch/tasks/LocalActions.yml
+++ b/roles/opendistro/opendistro-elasticsearch/tasks/LocalActions.yml
@@ -34,7 +34,14 @@
     dest: /tmp/opendistro-nodecerts/config/tlsconfig.yml
   run_once: true
 
+- name: RedHat/CentOS/Fedora | Check if root CA file exists
+  local_action:
+    module: stat 
+    path: /tmp/opendistro-nodecerts/config/root-ca.key
+  register: root_ca_file
+
 - name: RedHat/CentOS/Fedora | Generate the node & admin certificates in local
   local_action:
-    module: command /tmp/opendistro-nodecerts/tools/sgtlstool.sh -c /tmp/opendistro-nodecerts/config/tlsconfig.yml -ca -crt -t /tmp/opendistro-nodecerts/config/ -f
-  run_once: true
\ No newline at end of file
+    module: command /tmp/opendistro-nodecerts/tools/sgtlstool.sh -c /tmp/opendistro-nodecerts/config/tlsconfig.yml -ca -crt -t /tmp/opendistro-nodecerts/config/ -f -o
+  run_once: true
+  when: root_ca_file.stat.exists == False
\ No newline at end of file