diff --git a/src/wizard/openvpn.xml b/src/wizard/openvpn.xml
index 4000c9c39..0b75f4f7f 100644
--- a/src/wizard/openvpn.xml
+++ b/src/wizard/openvpn.xml
@@ -312,6 +312,7 @@
 		</field>
 		<field>
 			<type>certca_selection</type>
+			<internal>1</internal>
 			<name>certca</name>
 			<displayname>Certificate Authority</displayname>
 			<bindstofield>ovpnserver->step6->authcertca</bindstofield>
diff --git a/src/www/wizard.php b/src/www/wizard.php
index 39521448b..a64884b43 100644
--- a/src/www/wizard.php
+++ b/src/www/wizard.php
@@ -596,6 +596,9 @@ function showchange() {
 					echo "<option value='" . $field['add_to_certca_selection'] . "'" . $SELECTED . ">" . $field['add_to_certca_selection'] . "</option>\n";
 				}
 				foreach($config['ca'] as $ca) {
+					if (!empty($field['internal']) && empty($ca['prv'])) {
+						continue;
+					}
 					$name = htmlspecialchars($ca['descr']);
 					$SELECTED = "";
 					if ($value == $name) $SELECTED = " selected=\"selected\"";