diff --git a/manifests/init.pp b/manifests/init.pp
index d09d7c2560ab4aa542a2caeb441a0a3899156288..4a64d65e788a633f69bd14253c8dc68b56f602a8 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -28,6 +28,7 @@ class aes {
           'python3',
           'python3-pip',
           'python3-ldap',
+          'nss-tools', # certutil
         ]:
           ensure  => installed,
       }