diff --git a/README.md b/README.md
index 4228a280..201bee87 100644
--- a/README.md
+++ b/README.md
@@ -164,8 +164,18 @@ docker run --rm -it --volumes-from pki_storage --volumes-from shared_storage pki
 For production environment:
 
 ```
-docker run --rm -it --volumes-from pki_storage --volumes-from shared_storage pki_setup /bin/bash
-TODO next steps
+docker run --rm -it --volumes-from pki_storage --volumes-from shared_storage pki_setup IPorURL
+```
+
+Where `IPorURL` is the way the certificat will authenticate: if challengers
+will access the frontend with a custom domain, indicate this domain
+(eg. `epita_challenge.fic.local`); else indicate the IP of the **front** host
+on the network (eg. `192.168.0.5`).
+
+For example, 2015 PKI generation looks like:
+
+```
+docker run --rm -it --volumes-from pki_storage --volumes-from shared_storage pki_setup 192.168.0.5
 ```
 
 7. Build the perl `Mcrypt` debian package