diff --git a/deepfence_server/Dockerfile b/deepfence_server/Dockerfile
index 924e841c65..3f8bae0177 100644
--- a/deepfence_server/Dockerfile
+++ b/deepfence_server/Dockerfile
@@ -11,7 +11,6 @@ COPY deepfence_server/entrypoint.sh /entrypoint.sh
 RUN apt update && \
     apt install -y \
     bash \
-    ca-certificates \
     curl \
     wget \
     netcat-traditional \
diff --git a/deepfence_utils/directory/directory.go b/deepfence_utils/directory/directory.go
index 853573eee9..972303bfc3 100644
--- a/deepfence_utils/directory/directory.go
+++ b/deepfence_utils/directory/directory.go
@@ -180,12 +180,10 @@ func initRedis() RedisConfig {
 			redisDBNumber = 0
 		}
 	}
-	redisTLSConfig := os.Getenv("DEEPFENCE_REDIS_TLS")
 	return RedisConfig{
 		Endpoint: redisEndpoint,
 		Password: redisPassword,
 		Database: redisDBNumber,
-		TLSConfig: redisTLSConfig,
 	}
 }
 
diff --git a/deepfence_utils/directory/redis.go b/deepfence_utils/directory/redis.go
index ef7e121a76..225897f0ef 100644
--- a/deepfence_utils/directory/redis.go
+++ b/deepfence_utils/directory/redis.go
@@ -21,11 +21,6 @@ func newRedisClient(endpoints DBConfigs) (*redis.Client, error) {
 	if endpoints.Redis.Password != "" {
 		redisOptions.Password = endpoints.Redis.Password
 	}
-	if endpoints.Redis.TLSConfig != "" {
-		redisOptions.TLSConfig = &tls.Config{
-			MinVersion: tls.VersionTLS12,
-		}
-	}
 	return redis.NewClient(redisOptions), nil
 }