diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1fafac27f..0b382086b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -117,14 +117,15 @@ Add these lines:
 Reload apache:
 ```
 sudo a2enmod headers
-sudo /etc/init.d/apache2 reload
+sudo /etc/init.d/apache2 restart
 ```
 
-Configure registry application.yml to match the CA settings:
+Configure registry and epp application.yml to match the CA settings:
 ```
 ca_cert_path: '/home/registry/registry/shared/ca/certs/ca.cert.pem'
 ca_key_path: '/home/registry/registry/shared/ca/private/ca.key.pem'
 ca_key_password: 'registryalpha'
+webclient_ip: '54.154.91.240'
 ```
 
 Configure webclient application.yml to match the CA settings:
diff --git a/app/models/api_user.rb b/app/models/api_user.rb
index aee1ff203..1dd0b6ea6 100644
--- a/app/models/api_user.rb
+++ b/app/models/api_user.rb
@@ -9,7 +9,7 @@ class ApiUser < User
   validates :username, :password, :registrar, presence: true
   validates :username, uniqueness: true
 
-  # before_save :create_crt, if: -> (au) { au.csr_changed? }
+  before_save :create_crt, if: -> (au) { au.csr_changed? }
 
   attr_accessor :registrar_typeahead