diff --git a/ipaserver/secrets/client.py b/ipaserver/secrets/client.py
index a945e01c9..3c7a05547 100644
--- a/ipaserver/secrets/client.py
+++ b/ipaserver/secrets/client.py
@@ -96,6 +96,7 @@ class CustodiaClient(object):
 
         # Perform request
         r = requests.get(url, headers=headers,
+                         verify=paths.IPA_CA_CRT,
                          params={'type': 'kem', 'value': request})
         r.raise_for_status()
         reply = r.json()