diff --git a/ipapython/dnssec/keysyncer.py b/ipapython/dnssec/keysyncer.py
index 837602fb4..de5b5aa5f 100644
--- a/ipapython/dnssec/keysyncer.py
+++ b/ipapython/dnssec/keysyncer.py
@@ -177,4 +177,4 @@ class KeySyncer(SyncReplConsumer):
             return
         if not self.init_done:
             return
-        ipautil.run([paths.ODS_SIGNER])
+        ipautil.run([paths.ODS_SIGNER, 'ipa-hsm-update'])