diff --git a/debian/changelog b/debian/changelog
index 22e11680a..3df0cd430 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
 freeipa (4.6.3-2) UNRELEASED; urgency=medium
 
   * tests: Fix whitespace.
+  * client.dirs: Add /var/lib/ipa-client/pki.
 
  -- Timo Aaltonen <tjaalton@debian.org>  Sun, 04 Feb 2018 00:25:41 +0200
 
diff --git a/debian/freeipa-client.dirs b/debian/freeipa-client.dirs
index 8216877d6..43c7c9ada 100644
--- a/debian/freeipa-client.dirs
+++ b/debian/freeipa-client.dirs
@@ -2,4 +2,5 @@ etc/ipa
 etc/ipa/nssdb
 etc/krb5.conf.d
 etc/pki/nssdb
+var/lib/ipa-client/pki
 var/lib/ipa-client/sysrestore