diff --git a/modules/installation-mirror-repository.adoc b/modules/installation-mirror-repository.adoc
index 896ed9d38ab1..ec0696026987 100644
--- a/modules/installation-mirror-repository.adoc
+++ b/modules/installation-mirror-repository.adoc
@@ -225,8 +225,11 @@ mirrored, extract it and pin it to the release:
 +
 [source,terminal]
 ----
-$ oc adm release extract -a ${LOCAL_SECRET_JSON} --icsp-file=<file> --command=openshift-install "${LOCAL_REGISTRY}/${LOCAL_REPOSITORY}:${OCP_RELEASE}-${ARCHITECTURE}"
+$ oc adm release extract -a ${LOCAL_SECRET_JSON} --icsp-file=<file> --command=openshift-install "${LOCAL_REGISTRY}/${LOCAL_REPOSITORY}:${OCP_RELEASE}-${ARCHITECTURE}" \
+--insecure=true <1>
 ----
+<1> Optional: If you do not want to configure trust for the target registry, add the `--insecure=true` flag.
+
 ** If the local container registry is connected to the mirror host, run the following command:
 +
 ifdef::openshift-origin[]