diff --git a/pkg/yurttunnel/pki/certmanager/certmanager.go b/pkg/yurttunnel/pki/certmanager/certmanager.go
index 10b0cc797d2..659cd008630 100644
--- a/pkg/yurttunnel/pki/certmanager/certmanager.go
+++ b/pkg/yurttunnel/pki/certmanager/certmanager.go
@@ -92,6 +92,7 @@ func NewYurttunnelServerCertManager(
 			certificates.UsageKeyEncipherment,
 			certificates.UsageDigitalSignature,
 			certificates.UsageServerAuth,
+			certificates.UsageClientAuth,
 		},
 		ips)
 }