diff --git a/pkg/config/tls.go b/pkg/config/tls.go
index 290379ee..38149634 100644
--- a/pkg/config/tls.go
+++ b/pkg/config/tls.go
@@ -75,6 +75,7 @@ func GetTLSConfig(cfg tlsConfiger) (tlsConfig *tls.Config, err error) {
 				"execute-with-privileges",
 				"/usr/bin/security",
 				"add-trusted-cert",
+				"-d",
 				"-r", "trustRoot",
 				"-p", "ssl",
 				"-k", "/Library/Keychains/System.keychain",