diff --git a/manifests/site.pp b/manifests/site.pp
index ea6dfd3fbb..ef849d6751 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1055,7 +1055,7 @@ node 'nodepool.openstack.org' {
     content => hiera('infracloud_chocolate_ssl_cert_file_contents'),
     require => Class['::openstackci::nodepool'],
   }
-  file { '/etc/openstack/limestone_cacert.pem':
+  file { '/home/nodepool/.config/openstack/limestone_cacert.pem':
     ensure  => present,
     owner   => 'root',
     group   => 'root',
@@ -1147,7 +1147,7 @@ node /^nl\d+\.openstack\.org$/ {
     content => hiera('infracloud_chocolate_ssl_cert_file_contents'),
     require => Class['::openstackci::nodepool_launcher'],
   }
-  file { '/etc/openstack/limestone_cacert.pem':
+  file { '/home/nodepool/.config/openstack/limestone_cacert.pem':
     ensure  => present,
     owner   => 'root',
     group   => 'root',
@@ -1234,7 +1234,7 @@ node /^nb\d+\.openstack\.org$/ {
     content => hiera('infracloud_chocolate_ssl_cert_file_contents'),
     require => Class['::openstackci::nodepool_builder'],
   }
-  file { '/etc/openstack/limestone_cacert.pem':
+  file { '/home/nodepool/.config/openstack/limestone_cacert.pem':
     ensure  => present,
     owner   => 'root',
     group   => 'root',
diff --git a/modules/openstack_project/templates/nodepool/clouds.yaml.erb b/modules/openstack_project/templates/nodepool/clouds.yaml.erb
index dae681c58a..ead3ec9bc1 100644
--- a/modules/openstack_project/templates/nodepool/clouds.yaml.erb
+++ b/modules/openstack_project/templates/nodepool/clouds.yaml.erb
@@ -106,4 +106,4 @@ clouds:
       project_domain_name: default
     api_timeout: 60
     identity_api_version: 3
-    cacert: /etc/openstack/limestone_cacert.pem
+    cacert: /home/nodepool/.config/openstack/limestone_cacert.pem