diff --git a/meta/main.yml b/meta/main.yml
index 2d39771..cf0b9ca 100644
--- a/meta/main.yml
+++ b/meta/main.yml
@@ -4,5 +4,11 @@ galaxy_info:
   company: Rocky Linux Foundation
   license: MIT
   min_ansible_version: 2.8
-  galaxy_tags: []
+  platforms:
+    - name: EL
+      versions:
+        - 7
+        - 8
+  galaxy_tags:
+    - freeipa
 dependencies: []
diff --git a/tasks/main.yml b/tasks/main.yml
index 8cdb688..b121f58 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -5,6 +5,7 @@
   shell: /usr/sbin/ipa-client-install --unattended 2>&1 | grep "already configured"
   register: ipacheck
   ignore_errors: true
+  changed_when: false
 
 - name: Check certificate existence
   stat:
@@ -73,7 +74,8 @@
             group: "{{ item.owner | default(ipa_getcert_owner_default) }}"
             mode: '0640'
           with_items: "{{ ipa_getcert_requested_hostnames }}"
-      when: ipa_getcert_chain
+      when:
+        - ipa_getcert_chain
+        - ipa_cert_request.rc == 0
   when:
     - ipacheck.rc == 0
-    - ipa_cert_request.rc == 0