diff --git a/bundle/manifests/rhtas-operator.clusterserviceversion.yaml b/bundle/manifests/rhtas-operator.clusterserviceversion.yaml
index e88a36e02..add04ec21 100644
--- a/bundle/manifests/rhtas-operator.clusterserviceversion.yaml
+++ b/bundle/manifests/rhtas-operator.clusterserviceversion.yaml
@@ -121,7 +121,18 @@ metadata:
             "tuf": {
               "externalAccess": {
                 "enabled": true
-              }
+              },
+              "keys": [
+                {
+                  "name": "rekor.pub"
+                },
+                {
+                  "name": "ctfe.pub"
+                },
+                {
+                  "name": "fulcio_v1.crt.pem"
+                }
+              ]
             }
           }
         },
diff --git a/config/samples/rhtas_v1alpha1_securesign.yaml b/config/samples/rhtas_v1alpha1_securesign.yaml
index eb4b097fc..4b75b4fb4 100644
--- a/config/samples/rhtas_v1alpha1_securesign.yaml
+++ b/config/samples/rhtas_v1alpha1_securesign.yaml
@@ -35,4 +35,8 @@ spec:
   tuf:
     externalAccess:
       enabled: true
+    keys:
+      - name: rekor.pub
+      - name: ctfe.pub
+      - name: fulcio_v1.crt.pem
   ctlog: