diff --git a/security/huks/include/native_huks_api.h b/security/huks/include/native_huks_api.h
index eb7a334f02e27b882aaab3625a3c1f631cc73c17..f3888541b18eeece0c77609e8e87b26215a206b4 100644
--- a/security/huks/include/native_huks_api.h
+++ b/security/huks/include/native_huks_api.h
@@ -169,7 +169,7 @@ struct OH_Huks_Result OH_Huks_IsKeyItemExist(const struct OH_Huks_Blob *keyAlias
     const struct OH_Huks_ParamSet *paramSet);
 
 /**
- * @brief Obtain the key certificate chain.
+ * @brief Obtain the key certificate chain. This API can be called only by system applications.
  *
  * @permission ohos.permission.ATTEST_KEY
  * @param keyAlias Indicates the pointer to the alias of the target key.