diff --git a/global/overlay/etc/puppet/modules/cdn/manifests/ca.pp b/global/overlay/etc/puppet/modules/cdn/manifests/ca.pp
index 65cc35a..c8a99cd 100644
--- a/global/overlay/etc/puppet/modules/cdn/manifests/ca.pp
+++ b/global/overlay/etc/puppet/modules/cdn/manifests/ca.pp
@@ -63,6 +63,11 @@ class cdn::ca(
     creates => '/opt/step-ca/init/deb/step-cli_0.27.4-1_amd64.deb',
   }
 
+  package {'step-cli':
+    ensure => present
+    source => '/opt/step-ca/init/deb/step-cli_0.27.4-1_amd64.deb'
+  }
+
   if $ca_secrets {
     if $ca_secrets['key_password'] {
       file { '/opt/step-ca/init/secrets/key-password':