diff --git a/configuration.nix b/configuration.nix
index 593d515..6d7599e 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -63,7 +63,9 @@
   security = {
     rtkit.enable = true;
     pki.certificates = [ 
-      secrets.easyroamCa 
+      secrets.easyroamHSMW.clientKey
+      secrets.easyroamHSMW.clientCert
+      secrets.easyroamHSMW.rootCa
     ];  
   };
 
diff --git a/flake.nix b/flake.nix
index 2a7fe9a..caf4b32 100644
--- a/flake.nix
+++ b/flake.nix
@@ -22,8 +22,7 @@
         "electron-25.9.0"
       ];
     };
-    # secrets = import ./secrets/passwords-and-certificates.nix;
-    secrets.easyroamCa = "NOPE";
+    secrets = import ./secrets/passwords-and-certificates.nix;
   in 
   {
     nixosConfigurations = {
diff --git a/secrets/passwords-and-certificates.nix b/secrets/passwords-and-certificates.nix
index 126bca0..e9ffc5b 100644
Binary files a/secrets/passwords-and-certificates.nix and b/secrets/passwords-and-certificates.nix differ