diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index 009d3f2dfa..72fb654b19 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -12,7 +12,7 @@
   tags: digicert_hotfix
 
 - name: update ca trust
-  shell: /bin/update-ca-trust
+  shell: /usr/bin/update-ca-trust
   tags: digicert_hotfix
 
 # XXX fixme # a datacenter 'fact' from setup