diff --git a/docs/en/install-upgrade/installing-stack-demo-secure.asciidoc b/docs/en/install-upgrade/installing-stack-demo-secure.asciidoc
index ceea45375..058b54853 100644
--- a/docs/en/install-upgrade/installing-stack-demo-secure.asciidoc
+++ b/docs/en/install-upgrade/installing-stack-demo-secure.asciidoc
@@ -272,7 +272,7 @@ sudo mv /etc/elasticsearch/certs/http.p12 /etc/elasticsearch/certs/http-old.p12
 +
 ["source","shell"]
 ----
-sudo unzip -d /usr/share/elasticsearch/ /usr/share/elasticsearch/elasticsearch-ssl-http.zip
+sudo unzip -d /usr/share/elasticsearch/ /etc/elasticsearch/certs/elasticsearch-ssl-http.zip
 ----
 
 . When the archive is unpacked, the certificate files are located in separate directories for each {es} node and for the {kib} node.
@@ -906,4 +906,4 @@ to unify your logs, infrastructure metrics, uptime, and application performance
 
 * Want to protect your endpoints from security threats? Try
 https://www.elastic.co/security[{elastic-sec}]. Adding endpoint protection is
-just another integration that you add to the agent policy!
\ No newline at end of file
+just another integration that you add to the agent policy!