diff --git a/roles/compute-prep/handlers/main.yml b/roles/compute-prep/handlers/main.yml
index eee1556..d7e4f7b 100644
--- a/roles/compute-prep/handlers/main.yml
+++ b/roles/compute-prep/handlers/main.yml
@@ -3,3 +3,7 @@
 
 - name: run rc.local
   command: /etc/rc.local
+
+- name: update-ca-certifictes on compute node
+  command: update-ca-certificates
+
diff --git a/roles/compute-prep/tasks/main.yml b/roles/compute-prep/tasks/main.yml
index 76dffe2..1607e5f 100644
--- a/roles/compute-prep/tasks/main.yml
+++ b/roles/compute-prep/tasks/main.yml
@@ -15,6 +15,22 @@
     name: ubuntu
     groups: adm
 
+- name: Copy over CA certs
+  synchronize:
+    src: "/usr/local/share/ca-certificates/"
+    dest: "/usr/local/share/ca-certificates/"
+  notify:
+    - update-ca-certifictes on compute node
+
+- name: List certs in /usr/local/share/ca-certificates/
+  command: "ls -la /usr/local/share/ca-certificates/"
+  register: certs_on_compute
+  tags:
+    - skip_ansible_lint # diagnostics
+
+- name: Output from listing certs
+  debug: var=certs_on_compute
+
 - name: Add head node ubuntu user key
   authorized_key:
     user: ubuntu