diff --git a/CHANGELOG.md b/CHANGELOG.md
index 04d61456..8784bd6f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,8 @@ The **patch** part changes incrementally at each release.
 
 ### Removed
 
+* evoacme: remove Debian 9 support
+
 ### Security
 
 ## [10.1.0] 2020-08-21
diff --git a/evoacme/meta/main.yml b/evoacme/meta/main.yml
index 77d83e2b..ea0c5551 100644
--- a/evoacme/meta/main.yml
+++ b/evoacme/meta/main.yml
@@ -11,8 +11,8 @@ galaxy_info:
   platforms:
   - name: Debian
     versions:
-    - jessie
     - stretch
+    - buster
 
 dependencies: []
   # List your role dependencies here, one per line.
diff --git a/evoacme/tasks/main.yml b/evoacme/tasks/main.yml
index c7481ba0..bd8cc055 100644
--- a/evoacme/tasks/main.yml
+++ b/evoacme/tasks/main.yml
@@ -1,9 +1,11 @@
 ---
 
-- fail:
-    msg: only compatible with Debian >= 8
-  when:
-  - ansible_distribution != "Debian" or ansible_distribution_major_version is version('8', '<')
+- name: Verify Debian version
+  assert:
+    that:
+      - ansible_distribution == "Debian"
+      - ansible_distribution_major_version is version('9', '>=')
+    msg: only compatible with Debian >= 9
 
 - include: certbot.yml