diff --git a/deployment/deploy-over-testbed.md b/deployment/deploy-over-testbed.md
index 81e1bc2..7c531f3 100644
--- a/deployment/deploy-over-testbed.md
+++ b/deployment/deploy-over-testbed.md
@@ -6,13 +6,32 @@
 * At each site server, run NDNCERT client command line tools to get certificate issued by `/ndn` using the PIN code challenge, set up the CA configuration and run NDNCERT CA service.
 * Update the `/ndn`'s configuration file and restart the service.
 
-
 ## Step 1
 
 ```bash
-
+sudo ./step1-root-ca.sh
 ```
 
 ## Step 2
 
-## Step 3
\ No newline at end of file
+On each site:
+
+```bash
+ndncert-client
+```
+
+```bash
+sudo ./step-2-site-ca.sh
+```
+
+```bash
+ndnsec-dump-certificate XXX
+```
+
+## Step 3
+
+stop service
+
+update config file
+
+restart service
diff --git a/deployment/step-1-root-ca.sh b/deployment/step-1-root-ca.sh
index b7e89a4..abe999b 100644
--- a/deployment/step-1-root-ca.sh
+++ b/deployment/step-1-root-ca.sh
@@ -1,6 +1,6 @@
 #! /bin/bash
 
-# file name and password to a safebag
+# file name and password to a safebag TODO
 
 # compile and install ndncert
 git clone https://github.com/Zhiyi-Zhang/ndncert.git