diff --git a/etc/chrony/conf.d/ca-certificates.conf b/etc/chrony/conf.d/ca-certificates.conf
new file mode 100644
index 00000000..95e777e1
--- /dev/null
+++ b/etc/chrony/conf.d/ca-certificates.conf
@@ -0,0 +1,6 @@
+# CA-certificates for Chrony to trust NTS servers. Can be specified multiple
+# times
+# Debian
+ntstrustedcerts /etc/ssl/certs/ca-certificates.crt
+# Fedora
+ntstrustedcerts /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem