diff --git a/step-ca/certificate-authority-server-production.mdx b/step-ca/certificate-authority-server-production.mdx
index 029d8ddb..a798ad4b 100644
--- a/step-ca/certificate-authority-server-production.mdx
+++ b/step-ca/certificate-authority-server-production.mdx
@@ -366,7 +366,7 @@ Note: _This section requires a Linux OS running `systemd` version 245 or greater
   The service user will only be used by `systemd` to manage the CA. Run:
 
   <CodeBlock language="shell-session" copytext="sudo useradd --user-group --system --home /etc/step-ca --shell /bin/false step">
-  {`$ sudo useradd --user-group --system --home /etc/step-ca --shell /bin/false step`}
+  {`$ sudo useradd --user-group --system --create-home --home /etc/step-ca --shell /bin/false step`}
   </CodeBlock>
 
   If your CA will bind to port 443, the `step-ca` binary will need to be