diff --git a/roles/ipa/server/tasks/main.yml b/roles/ipa/server/tasks/main.yml
index 34ed33e048..4dc13e940c 100644
--- a/roles/ipa/server/tasks/main.yml
+++ b/roles/ipa/server/tasks/main.yml
@@ -163,6 +163,7 @@
     ansible.builtin.command:
       argv:
         - ipa-replica-install
+        - --setup-kra
         - --setup-ca
         - --admin-password={{ ipa_admin_password }}
         - --no-host-dns