diff --git a/docs/Setup.md b/docs/Setup.md
index bac49d1..7de0d35 100644
--- a/docs/Setup.md
+++ b/docs/Setup.md
@@ -126,6 +126,8 @@ IPU ES2K target.
    ```bash
    export IFACE=ens801f0d4
    ```
+   Make changes to the [infragent config file](#infragent-config-file-update)
+   for interface and interface type.
 
    For DPDK target, change the interfaceType in config.yaml file to "tap".
 
@@ -140,6 +142,7 @@ IPU ES2K target.
    before building the images.
 
 
+
 8. Make the docker images. This step builds the Kubernetes container images:
    ```bash
    make docker-build
@@ -176,6 +179,21 @@ IPU ES2K target.
     crictl pull localhost:5000/infraagent:latest
     ```
 
+### infraagent config file update
+
+The config file `deploy/es2k/infraagent-configmap.yaml` is used to inform the
+infraagent which interface and interfacetype to use.
+
+The interfaceType should be `cdq` for ES2K and the the interface name is the
+base name for PF for PCI device ID 1452
+
+```text
+interfaceType : cdq
+interface: ens801f0
+mtls: true
+insecure: false
+```
+
 ### inframanager config file update
 
 The config file `inframanager/config.yaml` is used to define the parameters
diff --git a/inframanager/config.yaml b/inframanager/config.yaml
index ab90885..1bf7301 100644
--- a/inframanager/config.yaml
+++ b/inframanager/config.yaml
@@ -58,13 +58,14 @@ InfraManager:
 #        ]
 #        Check https://pkg.go.dev/crypto/tls
 #        for the list of supported ciphersuites.
+#        The paths for the secrets are where the running
+#        instances look for the certs and these paths
+#        are not on the host where the secrets are
+#        being generated on
 
 # Not required for dpdk
   arp-mac: "00:0f:00:04:03:14"
   conn: mtls
-  server-cert: "/etc/pki/inframanager/certs/server/tls.crt"
-  server-key: "/etc/pki/inframanager/certs/server/tls.key"
-  ca-cert: "/etc/pki/inframanager/certs/server/ca.crt"
   ciphersuites : [
           "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
           "TLS_AES_256_GCM_SHA384",