diff --git a/va/hci/edpm-post-ceph/nova_ceph.yaml b/va/hci/edpm-post-ceph/nova_ceph.yaml
index 948f7686d..cfb1ad0c4 100644
--- a/va/hci/edpm-post-ceph/nova_ceph.yaml
+++ b/va/hci/edpm-post-ceph/nova_ceph.yaml
@@ -18,3 +18,11 @@ spec:
     - nova-cell1-compute-config
     - nova-migration-ssh-key
   playbook: osp.edpm.nova
+  tlsCert:
+    contents:
+      - dnsnames
+      - ips
+    networks:
+      - ctlplane
+    issuer: osp-rootca-issuer-internal
+  caCerts: combined-ca-bundle
diff --git a/va/nfv/ovs-dpdk-sriov/edpm/nova_ovs_dpdk_sriov.yaml b/va/nfv/ovs-dpdk-sriov/edpm/nova_ovs_dpdk_sriov.yaml
index 7f8a1f020..62d64aa6e 100644
--- a/va/nfv/ovs-dpdk-sriov/edpm/nova_ovs_dpdk_sriov.yaml
+++ b/va/nfv/ovs-dpdk-sriov/edpm/nova_ovs_dpdk_sriov.yaml
@@ -26,3 +26,11 @@ spec:
     - nova-cell1-compute-config
     - nova-migration-ssh-key
   playbook: osp.edpm.nova
+  tlsCert:
+    contents:
+      - dnsnames
+      - ips
+    networks:
+      - ctlplane
+    issuer: osp-rootca-issuer-internal
+  caCerts: combined-ca-bundle
diff --git a/va/nfv/ovs-dpdk/edpm/nova_ovs_dpdk.yaml b/va/nfv/ovs-dpdk/edpm/nova_ovs_dpdk.yaml
index d91f535c4..c08e8aa92 100644
--- a/va/nfv/ovs-dpdk/edpm/nova_ovs_dpdk.yaml
+++ b/va/nfv/ovs-dpdk/edpm/nova_ovs_dpdk.yaml
@@ -18,3 +18,11 @@ spec:
     - nova-cell1-compute-config
     - nova-migration-ssh-key
   playbook: osp.edpm.nova
+  tlsCert:
+    contents:
+      - dnsnames
+      - ips
+    networks:
+      - ctlplane
+    issuer: osp-rootca-issuer-internal
+  caCerts: combined-ca-bundle
diff --git a/va/nfv/sriov/edpm/nova_sriov.yaml b/va/nfv/sriov/edpm/nova_sriov.yaml
index 3b855c7bc..15e941b51 100644
--- a/va/nfv/sriov/edpm/nova_sriov.yaml
+++ b/va/nfv/sriov/edpm/nova_sriov.yaml
@@ -26,3 +26,11 @@ spec:
     - nova-cell1-compute-config
     - nova-migration-ssh-key
   playbook: osp.edpm.nova
+  tlsCert:
+    contents:
+      - dnsnames
+      - ips
+    networks:
+      - ctlplane
+    issuer: osp-rootca-issuer-internal
+  caCerts: combined-ca-bundle