diff --git a/modules/nw-ingress-gateway-api-enable.adoc b/modules/nw-ingress-gateway-api-enable.adoc
index 83890896cc00..47ab1efc0ba8 100644
--- a/modules/nw-ingress-gateway-api-enable.adoc
+++ b/modules/nw-ingress-gateway-api-enable.adoc
@@ -67,6 +67,11 @@ router-default             2/2     2            2           6h4m
 ----
 $ oc -n openshift-ingress create secret tls gwapi-wildcard --cert=wildcard.crt --key=wildcard.key
 ----
++
+[NOTE]
+====
+For more information on creating `wildcard.crt` and `wildcard.key` see _Replacing the default ingress certificate_.
+====
 
 . Get the domain of the Ingress Operator by running the following command:
 +
diff --git a/networking/ingress_load_balancing/configuring_ingress_cluster_traffic/ingress-gateway-api.adoc b/networking/ingress_load_balancing/configuring_ingress_cluster_traffic/ingress-gateway-api.adoc
index 1034918ce268..bbfb801c677c 100644
--- a/networking/ingress_load_balancing/configuring_ingress_cluster_traffic/ingress-gateway-api.adoc
+++ b/networking/ingress_load_balancing/configuring_ingress_cluster_traffic/ingress-gateway-api.adoc
@@ -19,6 +19,9 @@ include::modules/nw-ingress-gateway-api-implementation.adoc[leveloffset=+1]
 
 include::modules/nw-ingress-gateway-api-enable.adoc[leveloffset=+1]
 
+.Additional resources
+* xref:../../../security/certificates/replacing-default-ingress-certificate.adoc#replacing-default-ingress_replacing-default-ingress[Replacing the default ingress certificate]
+
 include::modules/nw-ingress-gateway-api-deployment-topologies.adoc[leveloffset=+1]
 
 .Additional resources