diff --git a/docs/rolereference.rst b/docs/rolereference.rst
index 084e3702c648edb0dc68c4c85debd8487df4b639..722045477660eaeaa4ff8902dae4efb044bf2f59 100644
--- a/docs/rolereference.rst
+++ b/docs/rolereference.rst
@@ -19,21 +19,6 @@ deployment. This section lists such parameters.
   automatically (see the role reference for details on parameters that need to
   be provided in the case).
 
-**tls_private_key_dir** (string, optional if paths to private keys for all roles are explicitly specified)
-  Path to directory on Ansible host that contains the private keys used by
-  services deployed by various roles. When TLS keys are not explicitly defined
-  in a role, this is the directory where the TLS key will be looked-up during
-  Ansible run. Expected filename pattern is ``FQDN_SERVICE.key`` (for example,
-  ``mail.example.com_smtp.key`` or ``xmpp.example.com_xmpp.key``).
-
-**tls_certificate_dir** (string, optional if paths to certificate files for all roles are explicitly specified)
-  Path to directory on Ansible host that contains the X.509 certificate files
-  used by services deployed by various roles. When X.509 certificate is not
-  explicitly defined in a role, this is the directory where the X.509
-  certificate will be looked-up during Ansible run. Expected filename pattern is
-  ``FQDN_SERVICE.pem`` (for example, ``mail.example.com_smtp.pem`` or
-  ``xmpp.example.com_xmpp.pem``).
-
 
 Preseed
 -------