diff --git a/policy/modules/contrib/certmonger.te b/policy/modules/contrib/certmonger.te
index 9138ab22ef..c1eaa25ee8 100644
--- a/policy/modules/contrib/certmonger.te
+++ b/policy/modules/contrib/certmonger.te
@@ -84,6 +84,7 @@ corecmd_exec_shell(certmonger_t)
 dev_read_rand(certmonger_t)
 dev_read_urand(certmonger_t)
 dev_read_sysfs(certmonger_t)
+dev_rw_tpm(certmonger_t)
 
 domain_use_interactive_fds(certmonger_t)