diff --git a/cord-deploy-openstack.yml b/cord-deploy-openstack.yml
index 3a0e596..97a4efc 100644
--- a/cord-deploy-openstack.yml
+++ b/cord-deploy-openstack.yml
@@ -2,7 +2,7 @@
 # Deploys OpenStack in LXD containers on the CORD head node
 
 - name: Include vars
-  hosts: all
+  hosts: all, localhost
   tasks:
     - name: Include variables
       include_vars: "{{ item }}"
@@ -17,6 +17,19 @@
     - { role: head-prep, become: yes }
     - create-lxd
 
+- name: Create SSL root/intermediate CAs and server certificates
+  connection: local
+  hosts: localhost
+  roles:
+    - pki-root-ca
+    - pki-intermediate-ca
+    - pki-cert
+
+- name: Install CA certificates
+  hosts: head
+  roles:
+    - pki-install
+
 - name: Start OpenStack install
   hosts: head
   roles:
@@ -29,3 +42,4 @@
   hosts: head
   roles:
     - juju-finish
+