diff --git a/roles/juju-setup/handlers/main.yml b/roles/juju-setup/handlers/main.yml
new file mode 100644
index 0000000..695b2cb
--- /dev/null
+++ b/roles/juju-setup/handlers/main.yml
@@ -0,0 +1,9 @@
+- name: update-ca-certificates
+  become: yes
+  command: update-ca-certificates
+
+- name: Move cert to all service VMs
+  command: ansible services -b -u ubuntu -m copy -a "src={{ ansible_user_dir }}/keystone_juju_ca_cert.crt dest=/usr/local/share/ca-certificates/keystone_juju_ca_cert.crt owner=root group=root mode=0644"
+
+- name: update-ca-certificates in service VMs
+  command: ansible services -b -u ubuntu -m command -a "update-ca-certificates"