diff --git a/src/core/bootstrap/mod.rs b/src/core/bootstrap/mod.rs
index 36c90db4..9257d916 100644
--- a/src/core/bootstrap/mod.rs
+++ b/src/core/bootstrap/mod.rs
@@ -2098,6 +2098,7 @@ listener "tcp" {
   tls_disable   = false
   tls_cert_file = "../../conf/system/certificates/vault/server.crt"
   tls_key_file  = "../../conf/system/certificates/vault/server.key"
+  tls_client_ca_file = "../../conf/system/certificates/ca/ca.crt"
 }
 
 # API settings - use HTTPS
diff --git a/src/core/package_manager/installer.rs b/src/core/package_manager/installer.rs
index aee1aefd..051e3e06 100644
--- a/src/core/package_manager/installer.rs
+++ b/src/core/package_manager/installer.rs
@@ -912,6 +912,7 @@ listener "tcp" {
   tls_disable   = false
   tls_cert_file = "{{CONF_PATH}}/system/certificates/vault/server.crt"
   tls_key_file  = "{{CONF_PATH}}/system/certificates/vault/server.key"
+  tls_client_ca_file = "{{CONF_PATH}}/system/certificates/ca/ca.crt"
 }
 
 api_addr = "https://localhost:8200"
@@ -937,6 +938,7 @@ listener "tcp" {
   tls_disable   = false
   tls_cert_file = "{{CONF_PATH}}/system/certificates/vault/server.crt"
   tls_key_file  = "{{CONF_PATH}}/system/certificates/vault/server.key"
+  tls_client_ca_file = "{{CONF_PATH}}/system/certificates/ca/ca.crt"
 }
 
 api_addr = "https://localhost:8200"