diff --git a/confluent_server/bin/confluent_selfcheck b/confluent_server/bin/confluent_selfcheck
index f0ca02ab..74c58f51 100755
--- a/confluent_server/bin/confluent_selfcheck
+++ b/confluent_server/bin/confluent_selfcheck
@@ -246,7 +246,7 @@ if __name__ == '__main__':
             if uuid:
                 uuidok = True
             if 'deployment.useinsecureprotocols' in rsp:
-                insec = rsp.get('deployment.useinsecureprotocols', {}).get('value', None):
+                insec = rsp.get('deployment.useinsecureprotocols', {}).get('value', None)
                 if insec != 'firmware':
                     emprint(f'{args.node} does not have deployment.useinsecureprotocols set to firmware. This is fine for USB boot. HTTP boot can work, but requires the deployment server CA certificates be provisioned to the UEFI first.  PXE and HTTP boot without preprovisioned certificates will fail.')
             for key in rsp: