diff --git a/cmd/step-cloudkms-init/main.go b/cmd/step-cloudkms-init/main.go
index a09054c4..eb23b048 100644
--- a/cmd/step-cloudkms-init/main.go
+++ b/cmd/step-cloudkms-init/main.go
@@ -138,6 +138,7 @@ func createPKI(c *cloudkms.CloudKMS, project, location, keyRing string, protecti
 		Subject:               pkix.Name{CommonName: "Smallstep Root"},
 		SerialNumber:          mustSerialNumber(),
 		SubjectKeyId:          mustSubjectKeyID(resp.PublicKey),
+		AuthorityKeyId:        mustSubjectKeyID(resp.PublicKey),
 	}
 
 	b, err := x509.CreateCertificate(rand.Reader, root, root, resp.PublicKey, signer)