diff --git a/build_library/base_image_util.sh b/build_library/base_image_util.sh
index d2dcca1..b2e3a76 100755
--- a/build_library/base_image_util.sh
+++ b/build_library/base_image_util.sh
@@ -237,6 +237,10 @@
     arc_version="--arc_version=${CHROMEOS_ARC_VERSION}"
   fi
 
+  "${VBOOT_SIGNING_DIR}"/insert_container_publickey.sh \
+    "${root_fs_dir}" \
+    "${VBOOT_DEVKEYS_DIR}"/cros-oci-container-pub.pem
+
   local builder_path=
   if [[ -n "${FLAGS_builder_path}" ]]; then
     builder_path="--builder_path=${FLAGS_builder_path}"