diff --git a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2025-01-02-preview/managedClusters.json b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2025-01-02-preview/managedClusters.json
index 247f0f063d91..6473e48b0a35 100644
--- a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2025-01-02-preview/managedClusters.json
+++ b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2025-01-02-preview/managedClusters.json
@@ -8382,7 +8382,7 @@
         },
         "customCATrustCertificates": {
           "$ref": "#/definitions/ManagedClusterSecurityProfileCustomCATrustCertificates",
-          "description": "A list of up to 10 base64 encoded CAs that will be added to the trust store on nodes with the Custom CA Trust feature enabled. For more information see [Custom CA Trust Certificates](https://learn.microsoft.com/en-us/azure/aks/custom-certificate-authority)"
+          "description": "A list of up to 10 base64 encoded CAs that will be added to the trust store on all nodes in the cluster. For more information see [Custom CA Trust Certificates](https://learn.microsoft.com/en-us/azure/aks/custom-certificate-authority)."
         }
       },
       "description": "Security profile for the container service cluster."
@@ -8620,8 +8620,8 @@
       },
       "minItems": 0,
       "maxItems": 10,
-      "title": "The list of base64 encoded certificate strings that will be added to the node trust store. At most 10 strings can be provided.",
-      "description": "Certificates will only be added to trust stores on node pools that have enableCustomCATrust field set to true. If updated, the new list of certificates will be installed in the trust store in place of the old certificates. The certificates are applied asynchronously and will be available a short time after the list is updated."
+      "title": "The list of base64 encoded certificate strings that will be added to the node trust store. At most 10 certificates can be provided.",
+      "description": "Certificates will be added to trust stores of all the nodes in the cluster. If updated, the new list of certificates will be installed in the trust store in place of the old certificates. For node pools of VMSS type, updating the value of this field will result in nodes being reimaged."
     },
     "ManagedClusterStorageProfileDiskCSIDriver": {
       "type": "object",