diff --git a/doc/source/install/advanced_deployment/tls_everywhere.rst b/doc/source/install/advanced_deployment/tls_everywhere.rst
index e8a63264..8883cbab 100644
--- a/doc/source/install/advanced_deployment/tls_everywhere.rst
+++ b/doc/source/install/advanced_deployment/tls_everywhere.rst
@@ -148,6 +148,9 @@ like this::
 
 Remembering that optionally we can set other nameservers with this parameter.
 
+You'll also need to add set the DNS server for the ctlplane network to point to
+FreeIPA as described in :ref:`basic-deployment-cli-configure-namserver`.
+
 To tell the overcloud deployment to deploy the keystone endpoints (and
 references) using DNS names instead of IPs, we need to add the following
 environment to our overcloud deployment::
diff --git a/doc/source/install/basic_deployment/basic_deployment_cli.rst b/doc/source/install/basic_deployment/basic_deployment_cli.rst
index 815b248d..72387ee3 100644
--- a/doc/source/install/basic_deployment/basic_deployment_cli.rst
+++ b/doc/source/install/basic_deployment/basic_deployment_cli.rst
@@ -359,6 +359,8 @@ In addition, there are profile-specific flavors created which can be used with
 the profile-matching feature.  For more details on deploying with profiles,
 see :doc:`../advanced_deployment/profile_matching`.
 
+.. _basic-deployment-cli-configure-namserver:
+
 Configure a nameserver for the Overcloud
 ----------------------------------------