diff --git a/docs/user/security/securing-communications/elasticsearch-mutual-tls.asciidoc b/docs/user/security/securing-communications/elasticsearch-mutual-tls.asciidoc
index f5192f4641d4..63fd2799c90c 100644
--- a/docs/user/security/securing-communications/elasticsearch-mutual-tls.asciidoc
+++ b/docs/user/security/securing-communications/elasticsearch-mutual-tls.asciidoc
@@ -39,7 +39,7 @@ This entails generating a "server certificate" for {es} to use on the HTTP layer
 . Obtain a client certificate and private key for {kib}.
 +
 --
-{kib} must this "client certificate" and corresponding private key when connecting to {es}.
+{kib} uses the client certificate and corresponding private key when connecting to {es}.
 
 NOTE: This is not the same as the <<configuring-tls-browser-kib,server certificate>> that {kib} will present to web browsers.