diff --git a/cloud/lib/component/devcerts.go b/cloud/lib/component/devcerts.go
index 4d8668d..32d809c 100644
--- a/cloud/lib/component/devcerts.go
+++ b/cloud/lib/component/devcerts.go
@@ -72,6 +72,7 @@
 	if err != nil {
 		klog.Exitf("Failed to generate %s serial number: %v", c.ComponentName, err)
 	}
+	cert.ExtKeyUsage = append(cert.ExtKeyUsage, x509.ExtKeyUsageClientAuth)
 	cert.SerialNumber = serialNumber
 	cert.NotBefore = time.Now()
 	cert.NotAfter = pki.UnknownNotAfter