diff --git a/docker/Dockerfile.hsm b/docker/Dockerfile.hsm
index f6cec47a..66bc43db 100644
--- a/docker/Dockerfile.hsm
+++ b/docker/Dockerfile.hsm
@@ -18,7 +18,8 @@ COPY --from=kms /usr/local/bin/step-kms-plugin /usr/local/bin/step-kms-plugin
 
 USER root
 RUN apt-get update
-RUN apt-get install -y --no-install-recommends pcscd libpcsclite1
+RUN apt-get install -y --no-install-recommends pcscd libpcsclite1 ca-certificates
+RUN update-ca-certificates
 RUN mkdir -p /run/pcscd
 RUN chown step:step /run/pcscd
 USER step