diff --git a/deploy/az/servicefabric/WindowsContainers/readme.md b/deploy/az/servicefabric/WindowsContainers/readme.md
index 30591ff7d..856984b03 100644
--- a/deploy/az/servicefabric/WindowsContainers/readme.md
+++ b/deploy/az/servicefabric/WindowsContainers/readme.md
@@ -91,9 +91,12 @@ IMPORTANT: At this point, copy/cut the .PFX certificate file saved in the downlo
 
 ## Install the certificate
 Install the certificate (by double-clicking on the .PFX file) under 'Current User' store location (by default location) and check it as exportable.
+Also, install the same certificate as CA (Certificate Authority) under Current User, too.
 
 <img src="../../../../img/sf/install-cert.PNG">
 
+![image](https://user-images.githubusercontent.com/1712635/31642795-c6ffa434-b2a1-11e7-8ff8-2a63549a780e.png)
+
 ## Editing servicefabricdeploysecured.parameters.json file
 
 Edit the parameters in `servicefabricdeploysecured.parameters.json` in a similar way you can do with the unsecured .json file shown above (clusterName, dnsName, etc.), plus edit the following values: