diff --git a/profiles/base/accounts/group/pkcs11 b/profiles/base/accounts/group/pkcs11
index 9f99e95..54e0a70 100644
--- a/profiles/base/accounts/group/pkcs11
+++ b/profiles/base/accounts/group/pkcs11
@@ -1,4 +1,4 @@
 group:pkcs11
 gid:208
 # These users all need access to PKCS #11 crypto services.
-users:root,ipsec,chronos,chaps,wpa
+users:root,ipsec,chronos,chaps,wpa,attestation